--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39"}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59"}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55cc2a379db63cb56a9f79d71dbf1c2c4418219d2ac944afe3e7d570f38ea788","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55cc2a379db63cb56a9f79d71dbf1c2c4418219d2ac944afe3e7d570f38ea788","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55cc2a379db63cb56a9f79d71dbf1c2c4418219d2ac944afe3e7d570f38ea788"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55cc2a379db63cb56a9f79d71dbf1c2c4418219d2ac944afe3e7d570f38ea788","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55cc2a379db63cb56a9f79d71dbf1c2c4418219d2ac944afe3e7d570f38ea788"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55cc2a379db63cb56a9f79d71dbf1c2c4418219d2ac944afe3e7d570f38ea788","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55cc2a379db63cb56a9f79d71dbf1c2c4418219d2ac944afe3e7d570f38ea788","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55cc2a379db63cb56a9f79d71dbf1c2c4418219d2ac944afe3e7d570f38ea788"}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad"}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0"}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"}
{"level":"error","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc"}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc"}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02"}
{"level":"info","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912"}
{"level":"info","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b"}
{"level":"info","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc"}
{"level":"info","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667"}
{"level":"info","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc"}
{"level":"info","ts":"2026-07-13T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b"}
{"level":"info","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42114","PortSpecifier":{"PortValue":42114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42114","PortSpecifier":{"PortValue":42114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966400,"nanos":289906716},"http":{"id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fde861d4-2ed8-4a1c-bc07-0eea5a4d1599","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59818","PortSpecifier":{"PortValue":59818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59818","PortSpecifier":{"PortValue":59818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966400,"nanos":353247487},"http":{"id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/auth-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2c6282b-d4f6-45cc-92ca-9c1f0fc80b31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42120","PortSpecifier":{"PortValue":42120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93529e6b-59dd-4a91-b169-0c539821fe8e","method":"GET","path":"/maas-api/v1/api-keys/8fdf62d6-6f85-4f77-b507-c29ab24c6d9c","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42120","PortSpecifier":{"PortValue":42120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966400,"nanos":416555262},"http":{"id":"93529e6b-59dd-4a91-b169-0c539821fe8e","method":"GET","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8fdf62d6-6f85-4f77-b507-c29ab24c6d9c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8fdf62d6-6f85-4f77-b507-c29ab24c6d9c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93529e6b-59dd-4a91-b169-0c539821fe8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59824","PortSpecifier":{"PortValue":59824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","method":"GET","path":"/maas-api/v1/api-keys/093c7f54-b2c5-4183-ac55-c99e2a76179b","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59824","PortSpecifier":{"PortValue":59824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966400,"nanos":454847328},"http":{"id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","method":"GET","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/093c7f54-b2c5-4183-ac55-c99e2a76179b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/093c7f54-b2c5-4183-ac55-c99e2a76179b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/auth-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:13:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15a46f54-3634-4806-bb0c-109ddc22f3e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50194","PortSpecifier":{"PortValue":50194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e667d7d5-3b74-4389-990f-d59c671f0f85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50194","PortSpecifier":{"PortValue":50194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966417,"nanos":772592963},"http":{"id":"e667d7d5-3b74-4389-990f-d59c671f0f85","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e667d7d5-3b74-4389-990f-d59c671f0f85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34658","PortSpecifier":{"PortValue":34658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34658","PortSpecifier":{"PortValue":34658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966417,"nanos":811892368},"http":{"id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/auth-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9e4b312-7141-4ddf-8269-831b5b0102d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f57a288a-c009-489e-8fd6-08470744c981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50206","PortSpecifier":{"PortValue":50206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f57a288a-c009-489e-8fd6-08470744c981","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f57a288a-c009-489e-8fd6-08470744c981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50206","PortSpecifier":{"PortValue":50206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966417,"nanos":855936678},"http":{"id":"f57a288a-c009-489e-8fd6-08470744c981","method":"GET","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EBnCMPcrcRZ27H4v_UnM3xQTUXQiWOiKHBcqWY0TX2I3p3mvOSxVWTrXzaXe"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EBnCMPcrcRZ27H4v_UnM3xQTUXQiWOiKHBcqWY0TX2I3p3mvOSxVWTrXzaXe\"}"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1f7084a-086e-44e8-a11a-0c3b60ff3227","keyName":"e2e-auth-iso-a-dc1615","subscription":"e2e-auth-iso-0d6dae","tenant":"e2e-shared-a-a74fcd","userId":"f1f7084a-086e-44e8-a11a-0c3b60ff3227","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f57a288a-c009-489e-8fd6-08470744c981","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f57a288a-c009-489e-8fd6-08470744c981","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0d6dae"}
{"level":"info","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f57a288a-c009-489e-8fd6-08470744c981","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f57a288a-c009-489e-8fd6-08470744c981","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43760","PortSpecifier":{"PortValue":43760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43760","PortSpecifier":{"PortValue":43760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966433,"nanos":53038546},"http":{"id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ab33bd3-93e3-4769-8ae3-fdb98ee39f9b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46332","PortSpecifier":{"PortValue":46332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb9bebe7-a203-4821-9af8-95f7c1645606","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46332","PortSpecifier":{"PortValue":46332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966433,"nanos":88765160},"http":{"id":"bb9bebe7-a203-4821-9af8-95f7c1645606","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/auth-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb9bebe7-a203-4821-9af8-95f7c1645606","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46334","PortSpecifier":{"PortValue":46334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46334","PortSpecifier":{"PortValue":46334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966433,"nanos":130095071},"http":{"id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","method":"GET","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FKHIExtBW0hMC8Cr_kUJr2p0wLBqObSwt4O9luw7AVhOCX5apmaNgljFY4yZ"}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FKHIExtBW0hMC8Cr_kUJr2p0wLBqObSwt4O9luw7AVhOCX5apmaNgljFY4yZ\"}"}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-13T18:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"365b7ba7-d5f5-4419-bd62-f39e8019a0c3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51940","PortSpecifier":{"PortValue":51940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51940","PortSpecifier":{"PortValue":51940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966452,"nanos":533697089},"http":{"id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab0988a-320b-44b2-bb87-ce2e1eec63fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95256b51-a12d-48af-b314-1d66ee779ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51688","PortSpecifier":{"PortValue":51688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95256b51-a12d-48af-b314-1d66ee779ace","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95256b51-a12d-48af-b314-1d66ee779ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51688","PortSpecifier":{"PortValue":51688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966452,"nanos":569182070},"http":{"id":"95256b51-a12d-48af-b314-1d66ee779ace","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95256b51-a12d-48af-b314-1d66ee779ace","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95256b51-a12d-48af-b314-1d66ee779ace","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95256b51-a12d-48af-b314-1d66ee779ace","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95256b51-a12d-48af-b314-1d66ee779ace","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95256b51-a12d-48af-b314-1d66ee779ace","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95256b51-a12d-48af-b314-1d66ee779ace","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/auth-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95256b51-a12d-48af-b314-1d66ee779ace","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95256b51-a12d-48af-b314-1d66ee779ace","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95256b51-a12d-48af-b314-1d66ee779ace","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95256b51-a12d-48af-b314-1d66ee779ace","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95256b51-a12d-48af-b314-1d66ee779ace","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51952","PortSpecifier":{"PortValue":51952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51952","PortSpecifier":{"PortValue":51952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966452,"nanos":608190251},"http":{"id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c5318c1-1fd3-49d7-8030-29d9ee505eab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55196","PortSpecifier":{"PortValue":55196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55196","PortSpecifier":{"PortValue":55196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966452,"nanos":643187490},"http":{"id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/auth-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"516c02ea-d288-44a4-b3ba-ed70c5b4f739","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38010","PortSpecifier":{"PortValue":38010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a95333b6-0fea-4c0b-994b-64b9092daca9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38010","PortSpecifier":{"PortValue":38010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966476,"nanos":367276932},"http":{"id":"a95333b6-0fea-4c0b-994b-64b9092daca9","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a95333b6-0fea-4c0b-994b-64b9092daca9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52354","PortSpecifier":{"PortValue":52354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52354","PortSpecifier":{"PortValue":52354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966476,"nanos":408616541},"http":{"id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/auth-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ff80bf-de46-41a7-8f2f-01c5bce6918f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52356","PortSpecifier":{"PortValue":52356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"421060d4-cc8a-4902-b593-afe1e27a22f0","method":"GET","path":"/maas-api/v1/api-keys/56e10421-4142-4b65-b651-c386e03857ca","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52356","PortSpecifier":{"PortValue":52356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966476,"nanos":448785677},"http":{"id":"421060d4-cc8a-4902-b593-afe1e27a22f0","method":"GET","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56e10421-4142-4b65-b651-c386e03857ca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56e10421-4142-4b65-b651-c386e03857ca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/auth-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"421060d4-cc8a-4902-b593-afe1e27a22f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38024","PortSpecifier":{"PortValue":38024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8466d711-0840-43c9-8fae-6fa742af8ecc","method":"GET","path":"/maas-api/v1/api-keys/56e10421-4142-4b65-b651-c386e03857ca","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38024","PortSpecifier":{"PortValue":38024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966476,"nanos":483290369},"http":{"id":"8466d711-0840-43c9-8fae-6fa742af8ecc","method":"GET","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56e10421-4142-4b65-b651-c386e03857ca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56e10421-4142-4b65-b651-c386e03857ca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8466d711-0840-43c9-8fae-6fa742af8ecc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56712","PortSpecifier":{"PortValue":56712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56712","PortSpecifier":{"PortValue":56712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966493,"nanos":832367910},"http":{"id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a550e38a-ef0a-4fa2-bf4d-4570eb4d4c14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbff8415-031e-4377-b412-bb3e821aba96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45842","PortSpecifier":{"PortValue":45842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbff8415-031e-4377-b412-bb3e821aba96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbff8415-031e-4377-b412-bb3e821aba96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45842","PortSpecifier":{"PortValue":45842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966493,"nanos":870298914},"http":{"id":"dbff8415-031e-4377-b412-bb3e821aba96","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dbff8415-031e-4377-b412-bb3e821aba96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbff8415-031e-4377-b412-bb3e821aba96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbff8415-031e-4377-b412-bb3e821aba96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbff8415-031e-4377-b412-bb3e821aba96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbff8415-031e-4377-b412-bb3e821aba96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbff8415-031e-4377-b412-bb3e821aba96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/auth-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dbff8415-031e-4377-b412-bb3e821aba96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbff8415-031e-4377-b412-bb3e821aba96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbff8415-031e-4377-b412-bb3e821aba96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbff8415-031e-4377-b412-bb3e821aba96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbff8415-031e-4377-b412-bb3e821aba96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56718","PortSpecifier":{"PortValue":56718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d274ae57-045a-46a8-99c0-6410a0fe1730","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56718","PortSpecifier":{"PortValue":56718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966493,"nanos":909687572},"http":{"id":"d274ae57-045a-46a8-99c0-6410a0fe1730","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uSW3V9LdSWwcz9YX_qQZYjYJzW46JMCFaLzU8JQJqORH5u1pUJXJbtxOUA3M"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uSW3V9LdSWwcz9YX_qQZYjYJzW46JMCFaLzU8JQJqORH5u1pUJXJbtxOUA3M\"}"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c38e480c-e9a0-46fc-b529-5b7eb3dcc104","keyName":"e2e-auth-iso-a-06a9d4","subscription":"e2e-auth-iso-3c264e","tenant":"e2e-shared-a-a74fcd","userId":"c38e480c-e9a0-46fc-b529-5b7eb3dcc104","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/auth-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3c264e"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d274ae57-045a-46a8-99c0-6410a0fe1730","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cf31daa830fda172822153f38d29743581af73c7ebeafed6d91d9c33b5d3b0"}
{"level":"info","ts":"2026-07-13T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25b502b46b60db25dcb377605b2170eeb0e7d57b9b832ea630199cbbd0c133fe"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/800765fbfdab085aebf65f46616b8d95fd7f0861b01aa4b8ce75a8a6531ca912"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdfc1b04911dbf7b3c7d114f13df14c098231793a2f390c458e7aaec04aa0dcc"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1188297b46b81f43a3376998283f325b36f56b1ed844534cb15ef019fbe3edd2"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69beae2769b631b0bae7594df0d2d1f672773480ed9fa4832dc5c00ae0607b6"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5e0df0861cb5a88b9112eb9d2c5316d02952d24e3fb667ce4162ffb2f391cfd"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55cc2a379db63cb56a9f79d71dbf1c2c4418219d2ac944afe3e7d570f38ea788"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ed5ca24c398e30340c027a45842a8c3434249fcfe5495d7024ce9947a10d243"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ca0223a24bf776ed1cc382c0691b0e3cd5dd97b00215cb519eb0d35ace2b89b"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3bf9a850675e6a8e643b82d958ad5a257209d8e481e6049270d94b0b54947c3"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/727eaeb05ec1f0bf1aeb7357a8ce491e39c13be04272e0b87afd9e47284a4f59"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1294f27c7227bd6eedbff913c2350e5ceb4626e52decce78b9304ea26a6c90ad"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8b53b77df5f8dfbc85636aa77dbf3be2e188537ee919ef3ec7d094e2565259b"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fcbf4d867da3980949b78b3c5354755f5ad392202c9cca4fca18d9182cea15b"}
{"level":"info","ts":"2026-07-13T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a19d83cf1cc4ccdb26bb12cf3761f2da05f9fed65dc249270d0ff3f9a326c76"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8"}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"info","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"error","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"error","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"error","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"}
{"level":"error","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d"}
{"level":"error","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"}
{"level":"error","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d"}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4df7e206595b1f9fdfaa4ebd934a5ed937c79dc9f248f0b37a3b3d445a6e87"}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4df7e206595b1f9fdfaa4ebd934a5ed937c79dc9f248f0b37a3b3d445a6e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4df7e206595b1f9fdfaa4ebd934a5ed937c79dc9f248f0b37a3b3d445a6e87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4df7e206595b1f9fdfaa4ebd934a5ed937c79dc9f248f0b37a3b3d445a6e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4df7e206595b1f9fdfaa4ebd934a5ed937c79dc9f248f0b37a3b3d445a6e87"}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4df7e206595b1f9fdfaa4ebd934a5ed937c79dc9f248f0b37a3b3d445a6e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"debug","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5"}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5"}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:15:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8"}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4df7e206595b1f9fdfaa4ebd934a5ed937c79dc9f248f0b37a3b3d445a6e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02"}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4df7e206595b1f9fdfaa4ebd934a5ed937c79dc9f248f0b37a3b3d445a6e87"}
{"level":"debug","ts":"2026-07-13T18:15:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"}
{"level":"debug","ts":"2026-07-13T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0"}
{"level":"info","ts":"2026-07-13T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"}
{"level":"info","ts":"2026-07-13T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"}
{"level":"info","ts":"2026-07-13T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44"}
{"level":"info","ts":"2026-07-13T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d"}
{"level":"info","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41654","PortSpecifier":{"PortValue":41654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41654","PortSpecifier":{"PortValue":41654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966557,"nanos":115992485},"http":{"id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/sub-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2385ccf1-f0bf-45aa-80c5-dfdc08b11589","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d70c77-7534-4668-aa42-477a1a521d79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55246","PortSpecifier":{"PortValue":55246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09d70c77-7534-4668-aa42-477a1a521d79","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d70c77-7534-4668-aa42-477a1a521d79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55246","PortSpecifier":{"PortValue":55246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966557,"nanos":166736512},"http":{"id":"09d70c77-7534-4668-aa42-477a1a521d79","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09d70c77-7534-4668-aa42-477a1a521d79","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09d70c77-7534-4668-aa42-477a1a521d79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09d70c77-7534-4668-aa42-477a1a521d79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d70c77-7534-4668-aa42-477a1a521d79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d70c77-7534-4668-aa42-477a1a521d79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d70c77-7534-4668-aa42-477a1a521d79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/sub-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09d70c77-7534-4668-aa42-477a1a521d79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d70c77-7534-4668-aa42-477a1a521d79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d70c77-7534-4668-aa42-477a1a521d79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d70c77-7534-4668-aa42-477a1a521d79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d70c77-7534-4668-aa42-477a1a521d79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41660","PortSpecifier":{"PortValue":41660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41660","PortSpecifier":{"PortValue":41660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966557,"nanos":209627144},"http":{"id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","method":"GET","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcxGR44SnMCMhYUj_qB5nuK4ahcmN80wWY1llL6waOUJY78U6j7wn3hioJOa"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcxGR44SnMCMhYUj_qB5nuK4ahcmN80wWY1llL6waOUJY78U6j7wn3hioJOa\"}"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c7c6d06a-a8f8-4313-820c-612180530376","keyName":"e2e-sub-iso-464da2","subscription":"e2e-a-only-f278bb","tenant":"e2e-shared-a-a74fcd","userId":"c7c6d06a-a8f8-4313-820c-612180530376","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/sub-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f278bb"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5809ea1-c858-470c-aa7d-7b84ee6a7361","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55250","PortSpecifier":{"PortValue":55250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7115c92e-c0c3-4660-9486-892270dd2e03","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55250","PortSpecifier":{"PortValue":55250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966557,"nanos":264307654},"http":{"id":"7115c92e-c0c3-4660-9486-892270dd2e03","method":"GET","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZpYlL4IsMEr2mUbI_NqTvrTmO1V3FHpinFdmABxK8Xgveflw748brRIjg5Ze"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZpYlL4IsMEr2mUbI_NqTvrTmO1V3FHpinFdmABxK8Xgveflw748brRIjg5Ze\"}"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ded5a3fb-ed28-4e28-9524-403f2a8a0f1d","keyName":"e2e-sub-iso-c5dcc8","subscription":"e2e-b-only-f278bb","tenant":"e2e-shared-b-762866","userId":"ded5a3fb-ed28-4e28-9524-403f2a8a0f1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/sub-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f278bb"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7115c92e-c0c3-4660-9486-892270dd2e03","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2da56459-a115-4ee3-8474-978887f39305","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38302","PortSpecifier":{"PortValue":38302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2da56459-a115-4ee3-8474-978887f39305","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2da56459-a115-4ee3-8474-978887f39305","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38302","PortSpecifier":{"PortValue":38302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966571,"nanos":837582970},"http":{"id":"2da56459-a115-4ee3-8474-978887f39305","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2da56459-a115-4ee3-8474-978887f39305","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2da56459-a115-4ee3-8474-978887f39305","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2da56459-a115-4ee3-8474-978887f39305","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2da56459-a115-4ee3-8474-978887f39305","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2da56459-a115-4ee3-8474-978887f39305","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2da56459-a115-4ee3-8474-978887f39305","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/sub-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2da56459-a115-4ee3-8474-978887f39305","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2da56459-a115-4ee3-8474-978887f39305","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2da56459-a115-4ee3-8474-978887f39305","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2da56459-a115-4ee3-8474-978887f39305","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2da56459-a115-4ee3-8474-978887f39305","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48700","PortSpecifier":{"PortValue":48700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48700","PortSpecifier":{"PortValue":48700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966571,"nanos":879064657},"http":{"id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/sub-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6dadce-94b9-42fd-994e-57d43c0c19a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38304","PortSpecifier":{"PortValue":38304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38304","PortSpecifier":{"PortValue":38304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966571,"nanos":912796883},"http":{"id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NjpM7aXyLUqSfqy8_3bq325XG1QsN6APviURWCWJ3hDGy4tyYyKRx9EDPjBm"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NjpM7aXyLUqSfqy8_3bq325XG1QsN6APviURWCWJ3hDGy4tyYyKRx9EDPjBm\"}"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39ff54b5-6a0c-46f7-aa9f-63c22c93e049","keyName":"e2e-sub-iso-a47728","subscription":"e2e-shared-sub-e3f003","tenant":"e2e-shared-a-a74fcd","userId":"39ff54b5-6a0c-46f7-aa9f-63c22c93e049","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/sub-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e3f003"}
{"level":"info","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c363b368-29b4-4d81-a8bf-cd5f26cab1a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7013f52e-2065-478e-84d6-617985aa1632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48706","PortSpecifier":{"PortValue":48706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7013f52e-2065-478e-84d6-617985aa1632","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7013f52e-2065-478e-84d6-617985aa1632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48706","PortSpecifier":{"PortValue":48706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966571,"nanos":947234043},"http":{"id":"7013f52e-2065-478e-84d6-617985aa1632","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19NhIeKdtbvQAFboh_K0rzfOid9LRP9OmQ6C3XW3oqFjeBy3D3DScYhzP1mv6"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19NhIeKdtbvQAFboh_K0rzfOid9LRP9OmQ6C3XW3oqFjeBy3D3DScYhzP1mv6\"}"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a89d1301-5bad-4f5e-808a-d372214fc90a","keyName":"e2e-sub-iso-71364d","subscription":"e2e-shared-sub-e3f003","tenant":"e2e-shared-b-762866","userId":"a89d1301-5bad-4f5e-808a-d372214fc90a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7013f52e-2065-478e-84d6-617985aa1632","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/sub-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e3f003"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7013f52e-2065-478e-84d6-617985aa1632","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7013f52e-2065-478e-84d6-617985aa1632","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7013f52e-2065-478e-84d6-617985aa1632","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:16:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7b19e922932e43c1b142a292fabd30a2f25463f3f2f3e656c8fe095f8e92d8f"}
{"level":"info","ts":"2026-07-13T18:16:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18ffc2206cb53d6f2a919d5c943c2438d6a0a0fdec3702eb3d4bef5f4611525b"}
{"level":"info","ts":"2026-07-13T18:16:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/012a51e4ddd758a7bfdeee47c76339640a6c9a82100107ead06d7ca67121f79b"}
{"level":"info","ts":"2026-07-13T18:16:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e4df7e206595b1f9fdfaa4ebd934a5ed937c79dc9f248f0b37a3b3d445a6e87"}
{"level":"info","ts":"2026-07-13T18:16:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a7c5948411aee2b977c281bcd459760d151b1075bfc4004376c07f590279392"}
{"level":"info","ts":"2026-07-13T18:16:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2636fbe2f0ba4829a4514da909db3563fa8ada2060c296bfa2d9f52ba39a24b2"}
{"level":"info","ts":"2026-07-13T18:16:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b676b4fcdbd33cc0ada70ab3767fd2065e5195925fac59c8768be20d1801e2d"}
{"level":"info","ts":"2026-07-13T18:16:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a49cdc04a299113960a7a3d3dc85c4a8f3c88c3f37bc68e86b3740496313dfc5"}
{"level":"info","ts":"2026-07-13T18:16:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43ba4e3ce3066c0fed7b666b7a762c799796803c21018b6a6f425d31e3621ebc"}
{"level":"info","ts":"2026-07-13T18:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a2badfec11781496ea4de304d18b6921aaa82b8d679892318b573dd482e8af2"}
{"level":"info","ts":"2026-07-13T18:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dedcb1c48ba9f1934b4e895e8177c894ba87b10da910dcbddd4fd13c50c6b4d"}
{"level":"info","ts":"2026-07-13T18:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/460ac3048dc66d6c82d473a2e7b0caf1f2f081e1cffcc1b70972ac13203de322"}
{"level":"info","ts":"2026-07-13T18:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/babe971c1952841574ca914fddba08508dc8ce1bc372717038a6be08e64d505f"}
{"level":"info","ts":"2026-07-13T18:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12dc210adb78032022b25751341ea2b24dbac06a4efd01a66c3a9a018349cbe8"}
{"level":"info","ts":"2026-07-13T18:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b3a731bceb9b5997c952e24ba9e1804cad0e7203fa9f47dbb36026198f628b4"}
{"level":"info","ts":"2026-07-13T18:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2d486ed2b4c36a2b136babc49ea88a36920ddbbc20cd067207168a1c1695b44"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"error","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"error","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"debug","ts":"2026-07-13T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495"}
{"level":"info","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:16:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:16:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"debug","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"}
{"level":"info","ts":"2026-07-13T18:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa"}
{"level":"error","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d"}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e"}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e"}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e"}
{"level":"error","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2"}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d"}
{"level":"error","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa"}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:17:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02"}
{"level":"debug","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277"}
{"level":"info","ts":"2026-07-13T18:17:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39"}
{"level":"info","ts":"2026-07-13T18:17:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b"}
{"level":"info","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35046","PortSpecifier":{"PortValue":35046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a749de2f-489b-4d7f-b237-46198fb6ae27","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35046","PortSpecifier":{"PortValue":35046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966651,"nanos":489911923},"http":{"id":"a749de2f-489b-4d7f-b237-46198fb6ae27","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a749de2f-489b-4d7f-b237-46198fb6ae27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55614","PortSpecifier":{"PortValue":55614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94079c2f-82bc-457e-9308-d31b2f4f683f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55614","PortSpecifier":{"PortValue":55614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966651,"nanos":534349252},"http":{"id":"94079c2f-82bc-457e-9308-d31b2f4f683f","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/rate-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94079c2f-82bc-457e-9308-d31b2f4f683f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35062","PortSpecifier":{"PortValue":35062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35062","PortSpecifier":{"PortValue":35062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966651,"nanos":578040761},"http":{"id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14u3kZZm4KkIojGZW_SaPv8RSKH3UFBMedeaGGD6f1UGNPtABv2pnVd9yPByE"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14u3kZZm4KkIojGZW_SaPv8RSKH3UFBMedeaGGD6f1UGNPtABv2pnVd9yPByE\"}"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"623b1746-3fbc-4102-8047-1a4d7d1365ec","keyName":"e2e-rate-a-434aca","subscription":"e2e-rate-iso-a-434aca","tenant":"e2e-shared-a-a74fcd","userId":"623b1746-3fbc-4102-8047-1a4d7d1365ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-434aca\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-434aca","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-434aca"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"623b1746-3fbc-4102-8047-1a4d7d1365ec","keyName":"e2e-rate-a-434aca","selected_subscription":"e2e-rate-iso-a-434aca","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-434aca@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-434aca","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce3005eb-2fc8-41cf-b180-07ba8c7c37d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37598","PortSpecifier":{"PortValue":37598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37598","PortSpecifier":{"PortValue":37598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966652,"nanos":642991603},"http":{"id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14u3kZZm4KkIojGZW_SaPv8RSKH3UFBMedeaGGD6f1UGNPtABv2pnVd9yPByE"}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14u3kZZm4KkIojGZW_SaPv8RSKH3UFBMedeaGGD6f1UGNPtABv2pnVd9yPByE\"}"}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"623b1746-3fbc-4102-8047-1a4d7d1365ec","keyName":"e2e-rate-a-434aca","subscription":"e2e-rate-iso-a-434aca","tenant":"e2e-shared-a-a74fcd","userId":"623b1746-3fbc-4102-8047-1a4d7d1365ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-434aca\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-434aca","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-434aca"}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"623b1746-3fbc-4102-8047-1a4d7d1365ec","keyName":"e2e-rate-a-434aca","selected_subscription":"e2e-rate-iso-a-434aca","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-434aca@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-434aca","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4266f40f-6e6b-45c3-8257-9e0a62007b42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37608","PortSpecifier":{"PortValue":37608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cecc254b-6b32-4d6c-a415-968c30ad442f","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37608","PortSpecifier":{"PortValue":37608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966653,"nanos":687137865},"http":{"id":"cecc254b-6b32-4d6c-a415-968c30ad442f","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14u3kZZm4KkIojGZW_SaPv8RSKH3UFBMedeaGGD6f1UGNPtABv2pnVd9yPByE"}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14u3kZZm4KkIojGZW_SaPv8RSKH3UFBMedeaGGD6f1UGNPtABv2pnVd9yPByE\"}"}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"623b1746-3fbc-4102-8047-1a4d7d1365ec","keyName":"e2e-rate-a-434aca","subscription":"e2e-rate-iso-a-434aca","tenant":"e2e-shared-a-a74fcd","userId":"623b1746-3fbc-4102-8047-1a4d7d1365ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-434aca\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-434aca","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-434aca"}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"623b1746-3fbc-4102-8047-1a4d7d1365ec","keyName":"e2e-rate-a-434aca","selected_subscription":"e2e-rate-iso-a-434aca","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-434aca@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-434aca","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cecc254b-6b32-4d6c-a415-968c30ad442f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40234","PortSpecifier":{"PortValue":40234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40234","PortSpecifier":{"PortValue":40234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966662,"nanos":707608989},"http":{"id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a73ea83c-5c6c-4c53-8d10-8e0641993f53","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46c48579-507c-42fb-8f07-6218b27ee584","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55186","PortSpecifier":{"PortValue":55186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46c48579-507c-42fb-8f07-6218b27ee584","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46c48579-507c-42fb-8f07-6218b27ee584","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55186","PortSpecifier":{"PortValue":55186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966662,"nanos":748573730},"http":{"id":"46c48579-507c-42fb-8f07-6218b27ee584","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46c48579-507c-42fb-8f07-6218b27ee584","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46c48579-507c-42fb-8f07-6218b27ee584","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bc073676-6518-4ce4-a858-0a0540f9f078","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"]}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46c48579-507c-42fb-8f07-6218b27ee584","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/81c9a1b5e201"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7f1a53c9-afa6-4c46-b7a0-ac94930fe579"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bc073676-6518-4ce4-a858-0a0540f9f078","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46c48579-507c-42fb-8f07-6218b27ee584","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46c48579-507c-42fb-8f07-6218b27ee584","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46c48579-507c-42fb-8f07-6218b27ee584","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/rate-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46c48579-507c-42fb-8f07-6218b27ee584","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46c48579-507c-42fb-8f07-6218b27ee584","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46c48579-507c-42fb-8f07-6218b27ee584","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46c48579-507c-42fb-8f07-6218b27ee584","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46c48579-507c-42fb-8f07-6218b27ee584","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40240","PortSpecifier":{"PortValue":40240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d47b493c-5655-4ab7-84d0-25bfa3754508","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40240","PortSpecifier":{"PortValue":40240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966662,"nanos":795959674},"http":{"id":"d47b493c-5655-4ab7-84d0-25bfa3754508","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d47b493c-5655-4ab7-84d0-25bfa3754508","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40256","PortSpecifier":{"PortValue":40256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40256","PortSpecifier":{"PortValue":40256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966663,"nanos":833595675},"http":{"id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f07236e-2deb-48c1-a8ec-c655d65ece8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40270","PortSpecifier":{"PortValue":40270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40270","PortSpecifier":{"PortValue":40270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966664,"nanos":872780574},"http":{"id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9ef7c07-f912-4622-b8fa-5c7eb1e9c47c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40282","PortSpecifier":{"PortValue":40282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40282","PortSpecifier":{"PortValue":40282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966665,"nanos":913126494},"http":{"id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28a2e9a8-0cba-460b-996b-a7f8c2aa19f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40286","PortSpecifier":{"PortValue":40286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff550700-944f-4639-8b3e-c34cc05d0792","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40286","PortSpecifier":{"PortValue":40286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966666,"nanos":956055928},"http":{"id":"ff550700-944f-4639-8b3e-c34cc05d0792","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff550700-944f-4639-8b3e-c34cc05d0792","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40302","PortSpecifier":{"PortValue":40302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40302","PortSpecifier":{"PortValue":40302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966667,"nanos":995510070},"http":{"id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dcbfea0-9c40-416c-87ef-d0cebd85f8bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40314","PortSpecifier":{"PortValue":40314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40314","PortSpecifier":{"PortValue":40314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966669,"nanos":37100617},"http":{"id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6f52980-e90a-499b-8d77-38bcf84ae3fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40326","PortSpecifier":{"PortValue":40326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40326","PortSpecifier":{"PortValue":40326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966670,"nanos":79394891},"http":{"id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be15188f-1962-4fd9-8ff4-f4cdc68178f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40332","PortSpecifier":{"PortValue":40332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40332","PortSpecifier":{"PortValue":40332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966671,"nanos":118661098},"http":{"id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ead19a9f-015a-4fe4-b305-f28f21ba0c2a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40338","PortSpecifier":{"PortValue":40338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","method":"POST","path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions","host":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40338","PortSpecifier":{"PortValue":40338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966672,"nanos":162374807},"http":{"id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","method":"POST","headers":{":authority":"e2e-shared-a-a74fcd.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-idgkty9RitkcrlEu_my9Vq4F6y66mbMPA9XZTxw8giUZbnmyF0w4qivWZxzS\"}"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","subscription":"e2e-rate-iso-a-262c1c","tenant":"e2e-shared-a-a74fcd","userId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\",\"requestedSubscription\":\"e2e-rate-iso-a-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a74fcd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"69ad0972-7d61-4b80-88c0-74292b45ea6e","keyName":"e2e-rate-a-262c1c","selected_subscription":"e2e-rate-iso-a-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-a-a74fcd/e2e-rate-iso-a-262c1c@ai-tenant-e2e-shared-a-a74fcd/rate-test-model-a74fcd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a74fcd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262c1c","namespace":"ai-tenant-e2e-shared-a-a74fcd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74fe4a1b-b87e-4214-9a76-f4a3960c992a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55190","PortSpecifier":{"PortValue":55190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","method":"POST","path":"/ai-tenant-e2e-shared-b-762866/rate-test-model-762866/v1/completions","host":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55190","PortSpecifier":{"PortValue":55190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966672,"nanos":202692476},"http":{"id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","method":"POST","headers":{":authority":"e2e-shared-b-762866.apps.faea9a92-7c33-4c62-a7ed-81c9a1b5e201.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-762866/rate-test-model-762866/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UG3RCRNQl1FWSzId_SW2wSaYDgtiJn9R1sw0LIQUbTzski5RpuDa7wNobD9G"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UG3RCRNQl1FWSzId_SW2wSaYDgtiJn9R1sw0LIQUbTzski5RpuDa7wNobD9G\"}"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd8930cf-da5d-48b4-81f3-0cc44c2f6efc","keyName":"e2e-rate-b-262c1c","subscription":"e2e-rate-iso-b-262c1c","tenant":"e2e-shared-b-762866","userId":"dd8930cf-da5d-48b4-81f3-0cc44c2f6efc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-762866/rate-test-model-762866\",\"requestedSubscription\":\"e2e-rate-iso-b-262c1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-762866.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-762866","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-262c1c","namespace":"ai-tenant-e2e-shared-b-762866","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-762866/rate-test-model-762866\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-262c1c"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd8930cf-da5d-48b4-81f3-0cc44c2f6efc","keyName":"e2e-rate-b-262c1c","selected_subscription":"e2e-rate-iso-b-262c1c","selected_subscription_key":"ai-tenant-e2e-shared-b-762866/e2e-rate-iso-b-262c1c@ai-tenant-e2e-shared-b-762866/rate-test-model-762866","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-762866","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-262c1c","namespace":"ai-tenant-e2e-shared-b-762866","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d3e2fc-1e25-4233-8146-7273ea3ca1b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:17:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/441f1eecd78b6f2b4e497ef1de8b12d979adb0ae8deffc62aac5f197e49b406e"}
{"level":"info","ts":"2026-07-13T18:17:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/736defea492acf2aa4f022c94d360a42f8a0c1ce1b7a75d0634c3d181b78624b"}
{"level":"info","ts":"2026-07-13T18:17:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26f9e744f0a34c9e8de07b39a7715a9bcd5ab6703734492be0c905edb0a7f657"}
{"level":"info","ts":"2026-07-13T18:17:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47ad3774a602acc8a40a55489189ed55c7f5956f4cfd387919d273d5d5532d5d"}
{"level":"info","ts":"2026-07-13T18:17:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34ff48d6bba5894bf675ad689e75bcccdcd9480fe5714d09df3a310d68d5deaa"}
{"level":"info","ts":"2026-07-13T18:17:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77f5801c26f1e689b523dd08cf3f53a4887d0e96059aa1669a404348fe681512"}
{"level":"info","ts":"2026-07-13T18:17:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fbd908170b96078b771765a1f94c26d0bdb4fd7fd2bbaef46ba6d16e3409495"}
{"level":"info","ts":"2026-07-13T18:18:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0b71c83ded2af3fb06e02d3aac3d32f3d18f203c2b6df96d7a1c3174866b975"}
{"level":"info","ts":"2026-07-13T18:18:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbd7ad6976f7af84af003e4bb8c5f6ae8f530d8fe09ddd0386f3dabc65421c01"}
{"level":"info","ts":"2026-07-13T18:18:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3c61c4c0f0d6704c01e888e10791b1aff10356f75315b704883d7942e755a5d"}
{"level":"info","ts":"2026-07-13T18:18:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9474cc95df251c8b3c305302de4d2024dd9c1434563334fc34247b9c8646c72"}
{"level":"info","ts":"2026-07-13T18:18:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/783ee26b47117cd44e5d7f649abcc2651ef31f5fa04398ede3cfce26d1ee6b45"}
{"level":"info","ts":"2026-07-13T18:18:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c34b2bd75f4e9646908d5813ca20909a4ac10d79bb729207d83475c44b5e429"}
{"level":"info","ts":"2026-07-13T18:18:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f0b4c2d4d51da0c84902746e8e5535f9558c9e1c6d88f0853c6da9239697277"}
{"level":"info","ts":"2026-07-13T18:18:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47b4bacdf9f90ef2901d9bc574950848606b35cff4c4bc9482542157afd8ffcc"}
{"level":"info","ts":"2026-07-13T18:18:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1fe30440b4a926b949a33b6007d4cec2d994c279ac7f42759dc9c2e85b0a1d2"}
{"level":"info","ts":"2026-07-13T18:18:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42a470b687dc1898223dd8a08be52a0f599f2f887c746ae9901afd0d75e4fa39"}
{"level":"info","ts":"2026-07-13T18:18:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f94c1536ef326b93dd280e3e86024550e9ca09b34a420c338eab06270e155e0"}
{"level":"info","ts":"2026-07-13T18:18:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1827cf106f0ff5f62179989702550613e329a56954342ce67c6133f0d8a2463"}
{"level":"info","ts":"2026-07-13T18:18:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07ca0e9716415bd7aa98174bdeca7dd87d4387330e86bd215001dce3aec8e76b"}
{"level":"info","ts":"2026-07-13T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff490e69bb929b16145cff5632627548bfb718efdb9d23f45694670c61e63e02"}
{"level":"info","ts":"2026-07-13T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ae4a39bcc6226a82c234d772f432c5f8dba4a97f719d765d5ddd0fd8c51eabc"}
{"level":"info","ts":"2026-07-13T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea97d2c76cbad8ba399d24a059046bf8b25b58d2c0666f897518b3f50c6f430a"}
{"level":"info","ts":"2026-07-13T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a65cacbe7409aaa30eb58d8c32b7369c4e5f84e46631cd04b020443b1ea667"}