--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2"}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2"}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2"}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2"}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2"}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783"}
{"level":"info","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"}
{"level":"info","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:01:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8352e045c9b9be52937297be78c1421e543d91c9ca257a434b5f571e2adef2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8352e045c9b9be52937297be78c1421e543d91c9ca257a434b5f571e2adef2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8352e045c9b9be52937297be78c1421e543d91c9ca257a434b5f571e2adef2b"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8352e045c9b9be52937297be78c1421e543d91c9ca257a434b5f571e2adef2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8352e045c9b9be52937297be78c1421e543d91c9ca257a434b5f571e2adef2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8352e045c9b9be52937297be78c1421e543d91c9ca257a434b5f571e2adef2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8352e045c9b9be52937297be78c1421e543d91c9ca257a434b5f571e2adef2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8352e045c9b9be52937297be78c1421e543d91c9ca257a434b5f571e2adef2b"}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2"}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6"}
{"level":"info","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d"}
{"level":"debug","ts":"2026-07-16T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51706","PortSpecifier":{"PortValue":51706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d329419a-e269-4be5-b2fc-39e0165cd754","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51706","PortSpecifier":{"PortValue":51706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239322,"nanos":284970901},"http":{"id":"d329419a-e269-4be5-b2fc-39e0165cd754","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d329419a-e269-4be5-b2fc-39e0165cd754","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40060","PortSpecifier":{"PortValue":40060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae235137-f27d-46ba-992a-e550eb0c179b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40060","PortSpecifier":{"PortValue":40060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239322,"nanos":352988167},"http":{"id":"ae235137-f27d-46ba-992a-e550eb0c179b","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/auth-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae235137-f27d-46ba-992a-e550eb0c179b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51722","PortSpecifier":{"PortValue":51722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49c31b67-7549-48c6-ab95-dd6c13000313","method":"GET","path":"/maas-api/v1/api-keys/19f26f8d-85ee-48cd-b445-159790631964","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51722","PortSpecifier":{"PortValue":51722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239322,"nanos":419038678},"http":{"id":"49c31b67-7549-48c6-ab95-dd6c13000313","method":"GET","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/19f26f8d-85ee-48cd-b445-159790631964",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/19f26f8d-85ee-48cd-b445-159790631964",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49c31b67-7549-48c6-ab95-dd6c13000313","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40076","PortSpecifier":{"PortValue":40076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8e5910b-ef86-4976-827f-4906533dfe55","method":"GET","path":"/maas-api/v1/api-keys/9e85916b-8118-4fe6-9edf-f501ae8f4f47","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40076","PortSpecifier":{"PortValue":40076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239322,"nanos":460809948},"http":{"id":"e8e5910b-ef86-4976-827f-4906533dfe55","method":"GET","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e85916b-8118-4fe6-9edf-f501ae8f4f47",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e85916b-8118-4fe6-9edf-f501ae8f4f47",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/auth-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8e5910b-ef86-4976-827f-4906533dfe55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46400","PortSpecifier":{"PortValue":46400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46400","PortSpecifier":{"PortValue":46400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239339,"nanos":596567346},"http":{"id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4da9fec0-a0b9-4918-b907-9df69a1b11e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59468","PortSpecifier":{"PortValue":59468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59468","PortSpecifier":{"PortValue":59468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239339,"nanos":639217637},"http":{"id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/auth-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49c425bf-a2c2-467f-adab-f947f6a6c74c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"477857f8-d20c-4f66-8602-1625745efcaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46402","PortSpecifier":{"PortValue":46402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"477857f8-d20c-4f66-8602-1625745efcaf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"477857f8-d20c-4f66-8602-1625745efcaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46402","PortSpecifier":{"PortValue":46402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239339,"nanos":678499056},"http":{"id":"477857f8-d20c-4f66-8602-1625745efcaf","method":"GET","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12bi3oXClh8fPm9Qi_iTtWQ3D6MSMYzMzI2NPrbZgtV3g721P0rWluwpSHtBF"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12bi3oXClh8fPm9Qi_iTtWQ3D6MSMYzMzI2NPrbZgtV3g721P0rWluwpSHtBF\"}"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a63c6fc8-ed56-4cd6-b3a5-14a68b61bb43","keyName":"e2e-auth-iso-a-56087e","subscription":"e2e-auth-iso-16037e","tenant":"e2e-shared-a-2140ea","userId":"a63c6fc8-ed56-4cd6-b3a5-14a68b61bb43","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"477857f8-d20c-4f66-8602-1625745efcaf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"477857f8-d20c-4f66-8602-1625745efcaf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-16037e"}
{"level":"info","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"477857f8-d20c-4f66-8602-1625745efcaf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"477857f8-d20c-4f66-8602-1625745efcaf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38362","PortSpecifier":{"PortValue":38362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38362","PortSpecifier":{"PortValue":38362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239356,"nanos":743798874},"http":{"id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2ce6f7-a462-4f44-822b-10182fee0f96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40932","PortSpecifier":{"PortValue":40932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40932","PortSpecifier":{"PortValue":40932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239356,"nanos":783832887},"http":{"id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/auth-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d14a769-462f-40b0-a077-aa9e2c7bf54f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40938","PortSpecifier":{"PortValue":40938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ade537ae-a698-4f65-96a8-daa81b27080e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40938","PortSpecifier":{"PortValue":40938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239356,"nanos":817791059},"http":{"id":"ade537ae-a698-4f65-96a8-daa81b27080e","method":"GET","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ni7Q8ddGHzIPbtJw_isdDaw1pnHupoikmzGByMSm3gV4nXSP0JTNV2tM9cVD"}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ni7Q8ddGHzIPbtJw_isdDaw1pnHupoikmzGByMSm3gV4nXSP0JTNV2tM9cVD\"}"}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-16T22:02:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade537ae-a698-4f65-96a8-daa81b27080e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:42378","PortSpecifier":{"PortValue":42378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c76f11df-c77a-436a-bbce-1893a68a5379","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:42378","PortSpecifier":{"PortValue":42378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239376,"nanos":59824763},"http":{"id":"c76f11df-c77a-436a-bbce-1893a68a5379","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c76f11df-c77a-436a-bbce-1893a68a5379","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48310","PortSpecifier":{"PortValue":48310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48310","PortSpecifier":{"PortValue":48310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239376,"nanos":101800497},"http":{"id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/auth-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c5a3e97-2eb9-4a36-a720-04e90ad7f69f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f20f759-d09e-4404-a97a-a09203d76318","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:42388","PortSpecifier":{"PortValue":42388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f20f759-d09e-4404-a97a-a09203d76318","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f20f759-d09e-4404-a97a-a09203d76318","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:42388","PortSpecifier":{"PortValue":42388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239376,"nanos":137664169},"http":{"id":"6f20f759-d09e-4404-a97a-a09203d76318","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f20f759-d09e-4404-a97a-a09203d76318","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f20f759-d09e-4404-a97a-a09203d76318","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f20f759-d09e-4404-a97a-a09203d76318","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f20f759-d09e-4404-a97a-a09203d76318","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f20f759-d09e-4404-a97a-a09203d76318","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f20f759-d09e-4404-a97a-a09203d76318","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f20f759-d09e-4404-a97a-a09203d76318","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f20f759-d09e-4404-a97a-a09203d76318","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f20f759-d09e-4404-a97a-a09203d76318","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f20f759-d09e-4404-a97a-a09203d76318","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f20f759-d09e-4404-a97a-a09203d76318","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48312","PortSpecifier":{"PortValue":48312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48312","PortSpecifier":{"PortValue":48312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239376,"nanos":176544799},"http":{"id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/auth-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:02:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c9af7ca-4eba-46b2-9e54-76202e3bb199","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7465a914-f501-4bb8-807e-536106582bb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46144","PortSpecifier":{"PortValue":46144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7465a914-f501-4bb8-807e-536106582bb6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7465a914-f501-4bb8-807e-536106582bb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46144","PortSpecifier":{"PortValue":46144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239393,"nanos":342236328},"http":{"id":"7465a914-f501-4bb8-807e-536106582bb6","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7465a914-f501-4bb8-807e-536106582bb6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7465a914-f501-4bb8-807e-536106582bb6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7465a914-f501-4bb8-807e-536106582bb6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7465a914-f501-4bb8-807e-536106582bb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7465a914-f501-4bb8-807e-536106582bb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7465a914-f501-4bb8-807e-536106582bb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7465a914-f501-4bb8-807e-536106582bb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7465a914-f501-4bb8-807e-536106582bb6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7465a914-f501-4bb8-807e-536106582bb6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7465a914-f501-4bb8-807e-536106582bb6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7465a914-f501-4bb8-807e-536106582bb6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46612","PortSpecifier":{"PortValue":46612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46612","PortSpecifier":{"PortValue":46612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239393,"nanos":378629893},"http":{"id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/auth-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ad7e495-b1c4-4352-8f39-bbf9fe16899f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"933f0975-348e-4326-b7d7-718e492f8459","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46622","PortSpecifier":{"PortValue":46622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"933f0975-348e-4326-b7d7-718e492f8459","method":"GET","path":"/maas-api/v1/api-keys/ed00b2df-fb22-465c-8a36-4c918cff29f2","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"933f0975-348e-4326-b7d7-718e492f8459","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46622","PortSpecifier":{"PortValue":46622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239393,"nanos":413610679},"http":{"id":"933f0975-348e-4326-b7d7-718e492f8459","method":"GET","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ed00b2df-fb22-465c-8a36-4c918cff29f2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"933f0975-348e-4326-b7d7-718e492f8459","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"933f0975-348e-4326-b7d7-718e492f8459","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"933f0975-348e-4326-b7d7-718e492f8459","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ed00b2df-fb22-465c-8a36-4c918cff29f2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"933f0975-348e-4326-b7d7-718e492f8459","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"933f0975-348e-4326-b7d7-718e492f8459","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"933f0975-348e-4326-b7d7-718e492f8459","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/auth-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"933f0975-348e-4326-b7d7-718e492f8459","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"933f0975-348e-4326-b7d7-718e492f8459","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"933f0975-348e-4326-b7d7-718e492f8459","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"933f0975-348e-4326-b7d7-718e492f8459","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"933f0975-348e-4326-b7d7-718e492f8459","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46154","PortSpecifier":{"PortValue":46154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","method":"GET","path":"/maas-api/v1/api-keys/ed00b2df-fb22-465c-8a36-4c918cff29f2","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46154","PortSpecifier":{"PortValue":46154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239393,"nanos":442354304},"http":{"id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","method":"GET","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ed00b2df-fb22-465c-8a36-4c918cff29f2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ed00b2df-fb22-465c-8a36-4c918cff29f2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57893962-3d2f-4d57-83b7-9c1d56ecbdeb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39222","PortSpecifier":{"PortValue":39222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccc80a02-db02-4c39-930a-2a610a3dc273","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39222","PortSpecifier":{"PortValue":39222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239410,"nanos":565568754},"http":{"id":"ccc80a02-db02-4c39-930a-2a610a3dc273","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccc80a02-db02-4c39-930a-2a610a3dc273","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"669ae318-3efe-4929-b564-34443a4a674d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54344","PortSpecifier":{"PortValue":54344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"669ae318-3efe-4929-b564-34443a4a674d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"669ae318-3efe-4929-b564-34443a4a674d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54344","PortSpecifier":{"PortValue":54344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239410,"nanos":597467511},"http":{"id":"669ae318-3efe-4929-b564-34443a4a674d","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"669ae318-3efe-4929-b564-34443a4a674d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"669ae318-3efe-4929-b564-34443a4a674d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"669ae318-3efe-4929-b564-34443a4a674d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"669ae318-3efe-4929-b564-34443a4a674d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"669ae318-3efe-4929-b564-34443a4a674d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"669ae318-3efe-4929-b564-34443a4a674d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/auth-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"669ae318-3efe-4929-b564-34443a4a674d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"669ae318-3efe-4929-b564-34443a4a674d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"669ae318-3efe-4929-b564-34443a4a674d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"669ae318-3efe-4929-b564-34443a4a674d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"669ae318-3efe-4929-b564-34443a4a674d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39228","PortSpecifier":{"PortValue":39228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39228","PortSpecifier":{"PortValue":39228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239410,"nanos":633671049},"http":{"id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HMGFAs5FXnzwrWT4_V3EWVUZwBGP1yfDx2XA4Tn3SUT5myF7qpmxVpSJdOIp"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HMGFAs5FXnzwrWT4_V3EWVUZwBGP1yfDx2XA4Tn3SUT5myF7qpmxVpSJdOIp\"}"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3b425d7-c591-4efd-8336-3aaaf96a0a08","keyName":"e2e-auth-iso-a-6abef3","subscription":"e2e-auth-iso-9c9c9d","tenant":"e2e-shared-a-2140ea","userId":"d3b425d7-c591-4efd-8336-3aaaf96a0a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/auth-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9c9c9d"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437255a9-8fcd-4bde-b00b-d75723ca5f86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05c17204e13eddb7b999d694f8b087039a593d6034fb15496ac8991f55dd41ca"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bae002a1f048a09c37c206374601bbce8ab6db1759253db61c3817d1697045b5"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf4f672f1f4c4055d0d3466c070d169387ef9beba061e856229381abf89606a8"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0ae86b55b356e6979fce3252465016545fa2c3b68906549f5db9b630c141783"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53276216be67ada8efbb6ce3952148bd97bbcedc98c6be2cebfec4a118936840"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0b167026f222d3ac7e8ed18f08a88c333e9812630ac8ee2e57c3a51cca7c40b"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fedf9135246fa7cb97646f38c3e772650149ed5eff0da9e978fe0d6e573e570b"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88295359a333e117fe51e4d94eea639a65fe8331f636ab72b4af44e26b2144d2"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/538ba7c4f74f85fa8df580629447f4b8d40f623b108d1201f41bf441d0cad3d2"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8352e045c9b9be52937297be78c1421e543d91c9ca257a434b5f571e2adef2b"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9692c51a03fe8031d60849059e14a0014e2dd8f7ddde9df313e9c7e761c1f8d"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e5e704956424e2c8eee4d9251946007234902da9c01395b80e7b121c745dcb6"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0763a3fd369437b80714d7c815587a1ea575e4d75b7a58ad8a58e846a271129a"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9da057232f07b431f21ffe298a6b1a2e1e3778d574c042ac14ea3f9b57cb0723"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/732293cdec652facb91edf529215eca7c8810b722a4a4175a95738043782bdf2"}
{"level":"info","ts":"2026-07-16T22:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc2ce21a82ddf322be8d3ba65926ccb2f1f8b0b45b5f786d532c491c86a8ee71"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131"}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131"}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"}
{"level":"debug","ts":"2026-07-16T22:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"}
{"level":"error","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e7ad45e0e5de57b37c152a83bbe0e1a738fbc471de0bda70846483d470d04af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e7ad45e0e5de57b37c152a83bbe0e1a738fbc471de0bda70846483d470d04af"}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"info","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"debug","ts":"2026-07-16T22:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:04:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab"}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d54b616c6fe3291e0a145118f8b7a504403bb2840775bf7cb2dd0514a307032","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d54b616c6fe3291e0a145118f8b7a504403bb2840775bf7cb2dd0514a307032"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9"}
{"level":"debug","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c667adc9f7e19ce9d7b20741f089421f2ed4be0b433d4baba55c4c1ae9a2a59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131"}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"info","ts":"2026-07-16T22:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c667adc9f7e19ce9d7b20741f089421f2ed4be0b433d4baba55c4c1ae9a2a59"}
{"level":"info","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56454","PortSpecifier":{"PortValue":56454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56454","PortSpecifier":{"PortValue":56454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239476,"nanos":790770983},"http":{"id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/sub-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b3cd59-4da9-404a-bf7c-1028ab826af6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60672","PortSpecifier":{"PortValue":60672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f25ea8b4-5722-4dec-a977-25c607afdc00","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60672","PortSpecifier":{"PortValue":60672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239476,"nanos":830038972},"http":{"id":"f25ea8b4-5722-4dec-a977-25c607afdc00","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/sub-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f25ea8b4-5722-4dec-a977-25c607afdc00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56466","PortSpecifier":{"PortValue":56466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56466","PortSpecifier":{"PortValue":56466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239476,"nanos":866574097},"http":{"id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","method":"GET","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KzORFSPC6D6Y8Klq_PHzTjDdkEqMY40vNtDn3DniQtLCMqIrEdUZNsfUWpgO"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KzORFSPC6D6Y8Klq_PHzTjDdkEqMY40vNtDn3DniQtLCMqIrEdUZNsfUWpgO\"}"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c251f691-857f-4dce-9e9f-8f2a87399216","keyName":"e2e-sub-iso-344853","subscription":"e2e-a-only-8496f6","tenant":"e2e-shared-a-2140ea","userId":"c251f691-857f-4dce-9e9f-8f2a87399216","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/sub-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-8496f6"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81d2bb37-0320-4984-820f-78f4a00aa4d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60688","PortSpecifier":{"PortValue":60688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60688","PortSpecifier":{"PortValue":60688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239476,"nanos":909424129},"http":{"id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","method":"GET","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vj8pxFl6Q4zaf0It_lMpQnLXfpiIB4oVxYxlbKyBVZJr7n0NzAtAumV0phiJ"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vj8pxFl6Q4zaf0It_lMpQnLXfpiIB4oVxYxlbKyBVZJr7n0NzAtAumV0phiJ\"}"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e6d19f23-e0d7-4f25-a24f-15814603db96","keyName":"e2e-sub-iso-e55ad0","subscription":"e2e-b-only-8496f6","tenant":"e2e-shared-b-a87ce2","userId":"e6d19f23-e0d7-4f25-a24f-15814603db96","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/sub-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-8496f6"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:04:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fc613a7-0f27-4058-99bc-d4a7b1c1f0bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50900","PortSpecifier":{"PortValue":50900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50900","PortSpecifier":{"PortValue":50900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239495,"nanos":451784280},"http":{"id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/sub-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71e4e108-7362-4564-b3df-2a6ff37ca7eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c474cee1-e09d-4030-b498-061551904930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:34334","PortSpecifier":{"PortValue":34334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c474cee1-e09d-4030-b498-061551904930","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c474cee1-e09d-4030-b498-061551904930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:34334","PortSpecifier":{"PortValue":34334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239495,"nanos":490470415},"http":{"id":"c474cee1-e09d-4030-b498-061551904930","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c474cee1-e09d-4030-b498-061551904930","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c474cee1-e09d-4030-b498-061551904930","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c474cee1-e09d-4030-b498-061551904930","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c474cee1-e09d-4030-b498-061551904930","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c474cee1-e09d-4030-b498-061551904930","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c474cee1-e09d-4030-b498-061551904930","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/sub-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c474cee1-e09d-4030-b498-061551904930","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c474cee1-e09d-4030-b498-061551904930","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c474cee1-e09d-4030-b498-061551904930","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c474cee1-e09d-4030-b498-061551904930","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c474cee1-e09d-4030-b498-061551904930","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50904","PortSpecifier":{"PortValue":50904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a549a544-e012-4ccd-bda4-8536c76090d4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50904","PortSpecifier":{"PortValue":50904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239495,"nanos":522445681},"http":{"id":"a549a544-e012-4ccd-bda4-8536c76090d4","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UnYelSzp4p9pscZe_vrysLffYga6d3Z8nizb9AsktgX7XyaqpMuK2bbSBIR2"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UnYelSzp4p9pscZe_vrysLffYga6d3Z8nizb9AsktgX7XyaqpMuK2bbSBIR2\"}"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d484cc3-ae01-4289-9749-dbe2d3e0d195","keyName":"e2e-sub-iso-63ff4c","subscription":"e2e-shared-sub-bc9974","tenant":"e2e-shared-a-2140ea","userId":"7d484cc3-ae01-4289-9749-dbe2d3e0d195","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/sub-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-bc9974"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a549a544-e012-4ccd-bda4-8536c76090d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:34336","PortSpecifier":{"PortValue":34336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:34336","PortSpecifier":{"PortValue":34336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239495,"nanos":551091935},"http":{"id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jZrr3kKhqg48XK77_81XaqnH8TC88vKAdNrDm49meIsWtFpKV8BcuOOtPXHG"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jZrr3kKhqg48XK77_81XaqnH8TC88vKAdNrDm49meIsWtFpKV8BcuOOtPXHG\"}"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"40c8c6dd-c27f-4b8c-b31d-39a950b6b966","keyName":"e2e-sub-iso-8a0a7d","subscription":"e2e-shared-sub-bc9974","tenant":"e2e-shared-b-a87ce2","userId":"40c8c6dd-c27f-4b8c-b31d-39a950b6b966","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/sub-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-bc9974"}
{"level":"info","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d575bc7-1b9e-495b-b1ac-5fbc2bf82dfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e154e30267c66f86d9af7be9ab71fee2e3770df3f4a50353a090def21cec79b"}
{"level":"info","ts":"2026-07-16T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6935dee80dc9a56a1dcf99a0a51980900c77a1140b7a6ee06ca0d72d1afeccb0"}
{"level":"info","ts":"2026-07-16T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e7e3df98ef9d4860438327fdd00e0c7dae8e2556e0f7bd1ec9a6ea79aa00bcf"}
{"level":"info","ts":"2026-07-16T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bae4f2017919ab68bc964c6dad31e586e73625fde8c6e0d7764c64a08613ac4a"}
{"level":"info","ts":"2026-07-16T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a6d1ba71c1c246997e333c78eb26c6fa81b74dad8c6f571e9ad4c449387b131"}
{"level":"info","ts":"2026-07-16T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/332a6e403b1e230f11823d7813e8b93c3535f624742d249636c994d92cfe4abf"}
{"level":"info","ts":"2026-07-16T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baa05180117861013e048176f586acbe84bad208240cfc9002af08510c605af0"}
{"level":"info","ts":"2026-07-16T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24a28d1f256994de4dc66032110603fbe3545781bb43d86b7d1601ea0b702ca1"}
{"level":"info","ts":"2026-07-16T22:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09bf38ea498f271bbcc66535672f1fe01e5430cafa49af52b39bf5f0aeb992b4"}
{"level":"info","ts":"2026-07-16T22:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ddef42a7cde17e8ccc12506bcec34df2d9f56195bd0bc0cb2f10226f744d222"}
{"level":"info","ts":"2026-07-16T22:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c426c329c84e499173c82708d7681bde5999e228b9a61af333a85bee1f42afab"}
{"level":"info","ts":"2026-07-16T22:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b3464437e795d869bf55662528bfa48a93127fdfdf0bf977eb1c74287090060"}
{"level":"info","ts":"2026-07-16T22:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8d4cc634c52465a955e9cd435eb450881a265295e6823e3cadd2d0eb2a1c9bf"}
{"level":"info","ts":"2026-07-16T22:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71864ae8881ce1dbd7299cd3529b7f4979ae7f2a6289074a489682b17c25f9d9"}
{"level":"info","ts":"2026-07-16T22:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aebb64cd25b68c134bbce4d69678edf3e496fd592077c48ae6798c3edd599d7c"}
{"level":"info","ts":"2026-07-16T22:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7565b3c199d9b99b24452f4a40a1280bdabbd1e0f63d45b9fab7992ad0e55190"}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"info","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"debug","ts":"2026-07-16T22:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"error","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"}
{"level":"error","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"error","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109"}
{"level":"debug","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109"}
{"level":"debug","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109"}
{"level":"debug","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"debug","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"debug","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"debug","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b"}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"info","ts":"2026-07-16T22:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e7ad45e0e5de57b37c152a83bbe0e1a738fbc471de0bda70846483d470d04af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c667adc9f7e19ce9d7b20741f089421f2ed4be0b433d4baba55c4c1ae9a2a59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e7ad45e0e5de57b37c152a83bbe0e1a738fbc471de0bda70846483d470d04af"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c667adc9f7e19ce9d7b20741f089421f2ed4be0b433d4baba55c4c1ae9a2a59"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1"}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287"}
{"level":"info","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d54b616c6fe3291e0a145118f8b7a504403bb2840775bf7cb2dd0514a307032","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:05:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:05:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:05:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:05:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d54b616c6fe3291e0a145118f8b7a504403bb2840775bf7cb2dd0514a307032"}
{"level":"debug","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350"}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109"}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"}
{"level":"info","ts":"2026-07-16T22:05:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def"}
{"level":"info","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48198","PortSpecifier":{"PortValue":48198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48198","PortSpecifier":{"PortValue":48198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239559,"nanos":184879770},"http":{"id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d18b21-4380-42c0-ac8e-d4119d13bc82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9deeb63a-9028-4f98-8286-045109917df9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56464","PortSpecifier":{"PortValue":56464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9deeb63a-9028-4f98-8286-045109917df9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9deeb63a-9028-4f98-8286-045109917df9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56464","PortSpecifier":{"PortValue":56464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239559,"nanos":224852868},"http":{"id":"9deeb63a-9028-4f98-8286-045109917df9","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9deeb63a-9028-4f98-8286-045109917df9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9deeb63a-9028-4f98-8286-045109917df9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9deeb63a-9028-4f98-8286-045109917df9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9deeb63a-9028-4f98-8286-045109917df9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9deeb63a-9028-4f98-8286-045109917df9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9deeb63a-9028-4f98-8286-045109917df9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/rate-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9deeb63a-9028-4f98-8286-045109917df9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9deeb63a-9028-4f98-8286-045109917df9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9deeb63a-9028-4f98-8286-045109917df9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9deeb63a-9028-4f98-8286-045109917df9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9deeb63a-9028-4f98-8286-045109917df9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48206","PortSpecifier":{"PortValue":48206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48206","PortSpecifier":{"PortValue":48206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239559,"nanos":257879461},"http":{"id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16Uudfim7hfBkzaBc_jwoWG4iWrRfXwEAHjiurFlHtkUwV0OQrnXI8GTAadv2"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16Uudfim7hfBkzaBc_jwoWG4iWrRfXwEAHjiurFlHtkUwV0OQrnXI8GTAadv2\"}"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"78eae3a4-3174-4e1b-93da-982385536b0f","keyName":"e2e-rate-a-05989d","subscription":"e2e-rate-iso-a-05989d","tenant":"e2e-shared-a-2140ea","userId":"78eae3a4-3174-4e1b-93da-982385536b0f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-05989d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-05989d","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-05989d"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"78eae3a4-3174-4e1b-93da-982385536b0f","keyName":"e2e-rate-a-05989d","selected_subscription":"e2e-rate-iso-a-05989d","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-05989d@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-05989d","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:05:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f40f607f-d7c1-4aee-a9d0-119753337d2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"672bb35f-197f-4681-9abb-c82a140b3181","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48222","PortSpecifier":{"PortValue":48222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"672bb35f-197f-4681-9abb-c82a140b3181","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"672bb35f-197f-4681-9abb-c82a140b3181","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48222","PortSpecifier":{"PortValue":48222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239560,"nanos":322757794},"http":{"id":"672bb35f-197f-4681-9abb-c82a140b3181","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16Uudfim7hfBkzaBc_jwoWG4iWrRfXwEAHjiurFlHtkUwV0OQrnXI8GTAadv2"}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16Uudfim7hfBkzaBc_jwoWG4iWrRfXwEAHjiurFlHtkUwV0OQrnXI8GTAadv2\"}"}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"78eae3a4-3174-4e1b-93da-982385536b0f","keyName":"e2e-rate-a-05989d","subscription":"e2e-rate-iso-a-05989d","tenant":"e2e-shared-a-2140ea","userId":"78eae3a4-3174-4e1b-93da-982385536b0f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-05989d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-05989d","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"672bb35f-197f-4681-9abb-c82a140b3181","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-05989d"}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bb35f-197f-4681-9abb-c82a140b3181","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"78eae3a4-3174-4e1b-93da-982385536b0f","keyName":"e2e-rate-a-05989d","selected_subscription":"e2e-rate-iso-a-05989d","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-05989d@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-05989d","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"672bb35f-197f-4681-9abb-c82a140b3181","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"672bb35f-197f-4681-9abb-c82a140b3181","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48232","PortSpecifier":{"PortValue":48232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48232","PortSpecifier":{"PortValue":48232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239561,"nanos":384964089},"http":{"id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16Uudfim7hfBkzaBc_jwoWG4iWrRfXwEAHjiurFlHtkUwV0OQrnXI8GTAadv2"}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16Uudfim7hfBkzaBc_jwoWG4iWrRfXwEAHjiurFlHtkUwV0OQrnXI8GTAadv2\"}"}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"78eae3a4-3174-4e1b-93da-982385536b0f","keyName":"e2e-rate-a-05989d","subscription":"e2e-rate-iso-a-05989d","tenant":"e2e-shared-a-2140ea","userId":"78eae3a4-3174-4e1b-93da-982385536b0f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-05989d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-05989d","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-05989d"}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"78eae3a4-3174-4e1b-93da-982385536b0f","keyName":"e2e-rate-a-05989d","selected_subscription":"e2e-rate-iso-a-05989d","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-05989d@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-05989d","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e0b6b4-aed0-4f98-9122-d1e47722f9c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44676","PortSpecifier":{"PortValue":44676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44676","PortSpecifier":{"PortValue":44676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239572,"nanos":261480307},"http":{"id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.91:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549117cf-ad96-4d7c-82ff-ef3a36df9855","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58638","PortSpecifier":{"PortValue":58638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0417e54b-a25c-4617-b346-75ea837ee30a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58638","PortSpecifier":{"PortValue":58638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239572,"nanos":299714761},"http":{"id":"0417e54b-a25c-4617-b346-75ea837ee30a","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"]}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f08ad593506"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c92c40b-de13-4aae-8569-dbe0c736f1ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edd1ecf0-7b7d-460e-881e-a5335e7075a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.120:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/rate-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0417e54b-a25c-4617-b346-75ea837ee30a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbce107f-12ea-485f-a70f-772a6f973677","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbce107f-12ea-485f-a70f-772a6f973677","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbce107f-12ea-485f-a70f-772a6f973677","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239572,"nanos":333708178},"http":{"id":"dbce107f-12ea-485f-a70f-772a6f973677","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4\"}"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","subscription":"e2e-rate-iso-a-bede26","tenant":"e2e-shared-a-2140ea","userId":"f17f1729-249c-4477-a573-267a713eac8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-bede26\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbce107f-12ea-485f-a70f-772a6f973677","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bede26"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbce107f-12ea-485f-a70f-772a6f973677","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","selected_subscription":"e2e-rate-iso-a-bede26","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-bede26@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbce107f-12ea-485f-a70f-772a6f973677","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbce107f-12ea-485f-a70f-772a6f973677","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44698","PortSpecifier":{"PortValue":44698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5630ce69-3d59-4310-b72f-695633fca7d1","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44698","PortSpecifier":{"PortValue":44698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239573,"nanos":371987781},"http":{"id":"5630ce69-3d59-4310-b72f-695633fca7d1","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4"}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4\"}"}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","subscription":"e2e-rate-iso-a-bede26","tenant":"e2e-shared-a-2140ea","userId":"f17f1729-249c-4477-a573-267a713eac8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-bede26\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bede26"}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","selected_subscription":"e2e-rate-iso-a-bede26","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-bede26@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5630ce69-3d59-4310-b72f-695633fca7d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47474","PortSpecifier":{"PortValue":47474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0731c507-33bb-4675-9d6e-339010b91ae1","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47474","PortSpecifier":{"PortValue":47474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239574,"nanos":405007158},"http":{"id":"0731c507-33bb-4675-9d6e-339010b91ae1","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4"}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4\"}"}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","subscription":"e2e-rate-iso-a-bede26","tenant":"e2e-shared-a-2140ea","userId":"f17f1729-249c-4477-a573-267a713eac8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-bede26\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bede26"}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","selected_subscription":"e2e-rate-iso-a-bede26","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-bede26@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0731c507-33bb-4675-9d6e-339010b91ae1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47482","PortSpecifier":{"PortValue":47482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47482","PortSpecifier":{"PortValue":47482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239575,"nanos":438236631},"http":{"id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4"}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4\"}"}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","subscription":"e2e-rate-iso-a-bede26","tenant":"e2e-shared-a-2140ea","userId":"f17f1729-249c-4477-a573-267a713eac8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-bede26\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bede26"}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","selected_subscription":"e2e-rate-iso-a-bede26","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-bede26@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25cdb60c-e107-4e8c-be9c-a9ce21f23298","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47490","PortSpecifier":{"PortValue":47490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e57c22a3-43ee-4d85-9d40-55654a643690","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47490","PortSpecifier":{"PortValue":47490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239576,"nanos":470043174},"http":{"id":"e57c22a3-43ee-4d85-9d40-55654a643690","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4"}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4\"}"}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","subscription":"e2e-rate-iso-a-bede26","tenant":"e2e-shared-a-2140ea","userId":"f17f1729-249c-4477-a573-267a713eac8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-bede26\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bede26"}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","selected_subscription":"e2e-rate-iso-a-bede26","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-bede26@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e57c22a3-43ee-4d85-9d40-55654a643690","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47498","PortSpecifier":{"PortValue":47498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47498","PortSpecifier":{"PortValue":47498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239577,"nanos":505629282},"http":{"id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4"}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4\"}"}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","subscription":"e2e-rate-iso-a-bede26","tenant":"e2e-shared-a-2140ea","userId":"f17f1729-249c-4477-a573-267a713eac8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-bede26\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bede26"}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","selected_subscription":"e2e-rate-iso-a-bede26","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-bede26@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6209a8d-4edf-4b2b-904e-19fcff19fafc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47510","PortSpecifier":{"PortValue":47510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da5e8750-d5d6-4694-9656-26858fe5f178","method":"POST","path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions","host":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47510","PortSpecifier":{"PortValue":47510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.91:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239578,"nanos":537248468},"http":{"id":"da5e8750-d5d6-4694-9656-26858fe5f178","method":"POST","headers":{":authority":"e2e-shared-a-2140ea.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QNZK6c2Cr8fi1UXh_pEc5EYRiNZ72yBXJf9p0O7JaUp3DzqxUhaQOLhBHSS4\"}"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","subscription":"e2e-rate-iso-a-bede26","tenant":"e2e-shared-a-2140ea","userId":"f17f1729-249c-4477-a573-267a713eac8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\",\"requestedSubscription\":\"e2e-rate-iso-a-bede26\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2140ea.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2140ea/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bede26"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f17f1729-249c-4477-a573-267a713eac8a","keyName":"e2e-rate-a-bede26","selected_subscription":"e2e-rate-iso-a-bede26","selected_subscription_key":"ai-tenant-e2e-shared-a-2140ea/e2e-rate-iso-a-bede26@ai-tenant-e2e-shared-a-2140ea/rate-test-model-2140ea","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2140ea","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bede26","namespace":"ai-tenant-e2e-shared-a-2140ea","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da5e8750-d5d6-4694-9656-26858fe5f178","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37470","PortSpecifier":{"PortValue":37470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","method":"POST","path":"/ai-tenant-e2e-shared-b-a87ce2/rate-test-model-a87ce2/v1/completions","host":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37470","PortSpecifier":{"PortValue":37470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.120:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784239578,"nanos":573813144},"http":{"id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","method":"POST","headers":{":authority":"e2e-shared-b-a87ce2.apps.ebff43c5-67ff-487e-8d57-1f08ad593506.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a87ce2/rate-test-model-a87ce2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4HVu4ebrGeklsf4M_7qotN69wxhhHIb7CiAQP9n0TfFuZMkBhJzvmUftxS8u"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4HVu4ebrGeklsf4M_7qotN69wxhhHIb7CiAQP9n0TfFuZMkBhJzvmUftxS8u\"}"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c0a1022-3e16-43ab-943f-2cf92ae1c5ba","keyName":"e2e-rate-b-bede26","subscription":"e2e-rate-iso-b-bede26","tenant":"e2e-shared-b-a87ce2","userId":"4c0a1022-3e16-43ab-943f-2cf92ae1c5ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a87ce2/rate-test-model-a87ce2\",\"requestedSubscription\":\"e2e-rate-iso-b-bede26\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a87ce2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a87ce2","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bede26","namespace":"ai-tenant-e2e-shared-b-a87ce2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a87ce2/rate-test-model-a87ce2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a87ce2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bede26"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c0a1022-3e16-43ab-943f-2cf92ae1c5ba","keyName":"e2e-rate-b-bede26","selected_subscription":"e2e-rate-iso-b-bede26","selected_subscription_key":"ai-tenant-e2e-shared-b-a87ce2/e2e-rate-iso-b-bede26@ai-tenant-e2e-shared-b-a87ce2/rate-test-model-a87ce2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a87ce2","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bede26","namespace":"ai-tenant-e2e-shared-b-a87ce2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T22:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26f769c4-5bc2-478a-a3f0-aa5b866fd716","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T22:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efd4096b21802b5572943df8f9834ccf065e8f68201cdfa4a8f2cca1350284d1"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c210f793ad44d906f6f2c8a258f62c58a074520357454938bd6764a3ae30851b"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63f1b2c7700035239e0d1d9cc91a7a2b781cb1d5d1138d680342d79ad76b4c35"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e87dacbb4b8c0446d6990daf58a37668b7edc67d201261516099af9cdb42287"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e806bbe897742e1be64837e194262fab844334d49899e2c9d79ec1606bad5def"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93f5e75e4f786e9ca1cab62237d75279c60feac9d92b479e3ab029a0a2a24109"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67dba6b448d5c49b94412e78102341a9fc008b63d059c5768c7c5fdbbb0e361a"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba0998087bbed4d1ccb3df33599acfe57bc2457f3c068ce15c4b64acb5ca4bf0"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff3f08f420b3d9cc5bcf85f0219da619eddc18af6a45e8c20f0afa59b55c975f"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86599ca0b4eabee200074c1229492bc31bc631f7b087a879dd6bdcd27ee98be5"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62eb84609b5e802d2e3049caa12bc4acdaf862f773b534e733875ca7a4c4d350"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35fd8cb2a3aaccdcd9277eed66690b974e51cb59d0cd3b26d07c608ec43d4c0d"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f1757012356d2e60a893ffadd584f0ee2e7f9ae04eed5c7f937804de0c6b0f0"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aad9d8ca4b957d9169f47c5d42c57fb23b18afffc86ba80501d39d95481d345"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7976cb0228e253ccbd347474afbf8d76dec3e525578eba2b9df8d3d077615711"}
{"level":"info","ts":"2026-07-16T22:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76018869a324524f9230cf7c28b9bcc79e26c18951de75ab42a1e32cd02fb39c"}
{"level":"info","ts":"2026-07-16T22:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c667adc9f7e19ce9d7b20741f089421f2ed4be0b433d4baba55c4c1ae9a2a59"}
{"level":"info","ts":"2026-07-16T22:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d54b616c6fe3291e0a145118f8b7a504403bb2840775bf7cb2dd0514a307032"}
{"level":"info","ts":"2026-07-16T22:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7a6024e94d60c5b2fd9a1dc24fb191d4558937958edb9394bc4c523e833ac9a"}
{"level":"info","ts":"2026-07-16T22:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e7ad45e0e5de57b37c152a83bbe0e1a738fbc471de0bda70846483d470d04af"}
{"level":"info","ts":"2026-07-16T22:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0e969a23dc90aff2ab3b9db90284f79e13044423bc1c99d19c66cf83134ca8d"}
{"level":"info","ts":"2026-07-16T22:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8dfe9887a8ec096462551d150a39b03914956d5041b85f0520084c6854c0f7f"}
{"level":"info","ts":"2026-07-16T22:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb7c721f42160cc26bfedf50452cbbf15248871d879b9b72381e6636aba5bd0"}
{"level":"info","ts":"2026-07-16T22:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33c43f9760f53bed30957a34a1d8a30b6fa2071035c35ace99961b56b330b5be"}