--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881"}
{"level":"debug","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881"}
{"level":"debug","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881"}
{"level":"debug","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881"}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e"}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e"}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e"}
{"level":"error","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"info","ts":"2026-07-07T16:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4daab1e2e4b9300933dd71855b0cb6649e4a317afd1879e71abb66660656f7a"}
{"level":"info","ts":"2026-07-07T16:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c979d068e3ace7f72f41e333f54e4bbd50613e6063de11ad2a73d2c77b9c881"}
{"level":"info","ts":"2026-07-07T16:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c404d10c1f6894ebfb8d6b83e8d89b70121727ab9ec5027074884d2527d8867e"}
{"level":"info","ts":"2026-07-07T16:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bb199db91d094dffc53a22e0e8c8ee822b1dc10f0d7ac6e583d20987ea02d8b"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ba4b62926cc983c0aa27305076d79533302438d18785b43d8cd568627b889f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ba4b62926cc983c0aa27305076d79533302438d18785b43d8cd568627b889f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ba4b62926cc983c0aa27305076d79533302438d18785b43d8cd568627b889f"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ba4b62926cc983c0aa27305076d79533302438d18785b43d8cd568627b889f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35ba4b62926cc983c0aa27305076d79533302438d18785b43d8cd568627b889f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a"}
{"level":"info","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ba4b62926cc983c0aa27305076d79533302438d18785b43d8cd568627b889f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ba4b62926cc983c0aa27305076d79533302438d18785b43d8cd568627b889f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf"}
{"level":"debug","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"}
{"level":"info","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ba4b62926cc983c0aa27305076d79533302438d18785b43d8cd568627b889f"}
{"level":"info","ts":"2026-07-07T16:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf"}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4"}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4"}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4"}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57"}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57"}
{"level":"info","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57"}
{"level":"error","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"}
{"level":"error","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec435078b426656daab385186f7f14a0beae52e939bb8aacf666ef9264f6d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec435078b426656daab385186f7f14a0beae52e939bb8aacf666ef9264f6d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec435078b426656daab385186f7f14a0beae52e939bb8aacf666ef9264f6d3ca"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec435078b426656daab385186f7f14a0beae52e939bb8aacf666ef9264f6d3ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec435078b426656daab385186f7f14a0beae52e939bb8aacf666ef9264f6d3ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec435078b426656daab385186f7f14a0beae52e939bb8aacf666ef9264f6d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec435078b426656daab385186f7f14a0beae52e939bb8aacf666ef9264f6d3ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"}
{"level":"error","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec435078b426656daab385186f7f14a0beae52e939bb8aacf666ef9264f6d3ca"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"info","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41910","PortSpecifier":{"PortValue":41910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41910","PortSpecifier":{"PortValue":41910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441142,"nanos":89171195},"http":{"id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7170b3f-e1e9-45b4-b4ec-31a82dd735ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54262","PortSpecifier":{"PortValue":54262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54262","PortSpecifier":{"PortValue":54262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441142,"nanos":152724069},"http":{"id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/auth-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4cbdb6c-4e80-4dad-940a-cf609d3808d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdd9f974-8731-424c-816e-8858884a396b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41914","PortSpecifier":{"PortValue":41914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cdd9f974-8731-424c-816e-8858884a396b","method":"GET","path":"/maas-api/v1/api-keys/11c009f4-8ae1-4906-9538-ae1bf8bfac4f","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdd9f974-8731-424c-816e-8858884a396b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41914","PortSpecifier":{"PortValue":41914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441142,"nanos":242303974},"http":{"id":"cdd9f974-8731-424c-816e-8858884a396b","method":"GET","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11c009f4-8ae1-4906-9538-ae1bf8bfac4f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cdd9f974-8731-424c-816e-8858884a396b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cdd9f974-8731-424c-816e-8858884a396b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cdd9f974-8731-424c-816e-8858884a396b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11c009f4-8ae1-4906-9538-ae1bf8bfac4f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdd9f974-8731-424c-816e-8858884a396b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdd9f974-8731-424c-816e-8858884a396b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdd9f974-8731-424c-816e-8858884a396b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cdd9f974-8731-424c-816e-8858884a396b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdd9f974-8731-424c-816e-8858884a396b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdd9f974-8731-424c-816e-8858884a396b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdd9f974-8731-424c-816e-8858884a396b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdd9f974-8731-424c-816e-8858884a396b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54278","PortSpecifier":{"PortValue":54278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","method":"GET","path":"/maas-api/v1/api-keys/176fb5e6-b6b5-4373-bcc2-5fd44683856a","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54278","PortSpecifier":{"PortValue":54278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441142,"nanos":283737995},"http":{"id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","method":"GET","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/176fb5e6-b6b5-4373-bcc2-5fd44683856a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/176fb5e6-b6b5-4373-bcc2-5fd44683856a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/auth-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bba1287e-84b1-4275-99ef-14c0d8d0a4c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41788","PortSpecifier":{"PortValue":41788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41788","PortSpecifier":{"PortValue":41788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441157,"nanos":349009409},"http":{"id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bf2cd4f-b5f7-4d18-82d2-5a68b9a052c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55942","PortSpecifier":{"PortValue":55942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44d4a31b-515d-48a1-b242-5106b5f1e150","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55942","PortSpecifier":{"PortValue":55942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441157,"nanos":392447671},"http":{"id":"44d4a31b-515d-48a1-b242-5106b5f1e150","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/auth-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d4a31b-515d-48a1-b242-5106b5f1e150","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41792","PortSpecifier":{"PortValue":41792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41792","PortSpecifier":{"PortValue":41792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441157,"nanos":445879548},"http":{"id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","method":"GET","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JNv5flkdF3EgLrpH_Bm0n0OLBUL1ufM1h49NhR8iqsnePjzhAkYUXUADfM7S"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JNv5flkdF3EgLrpH_Bm0n0OLBUL1ufM1h49NhR8iqsnePjzhAkYUXUADfM7S\"}"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"76050d17-85ae-4973-842c-3dda6ee5783d","keyName":"e2e-auth-iso-a-579a06","subscription":"e2e-auth-iso-9e4317","tenant":"e2e-shared-a-382396","userId":"76050d17-85ae-4973-842c-3dda6ee5783d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9e4317"}
{"level":"info","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43e7f6ee-2bb5-4bef-bf4d-8880173e2df2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33386","PortSpecifier":{"PortValue":33386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da6a3396-6312-47ac-9f36-d7519b0fab15","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33386","PortSpecifier":{"PortValue":33386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441170,"nanos":360179855},"http":{"id":"da6a3396-6312-47ac-9f36-d7519b0fab15","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da6a3396-6312-47ac-9f36-d7519b0fab15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c64f1149-715b-4238-be20-7b1d748c917a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38488","PortSpecifier":{"PortValue":38488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c64f1149-715b-4238-be20-7b1d748c917a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c64f1149-715b-4238-be20-7b1d748c917a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38488","PortSpecifier":{"PortValue":38488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441170,"nanos":395774478},"http":{"id":"c64f1149-715b-4238-be20-7b1d748c917a","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c64f1149-715b-4238-be20-7b1d748c917a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c64f1149-715b-4238-be20-7b1d748c917a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c64f1149-715b-4238-be20-7b1d748c917a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c64f1149-715b-4238-be20-7b1d748c917a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c64f1149-715b-4238-be20-7b1d748c917a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c64f1149-715b-4238-be20-7b1d748c917a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/auth-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c64f1149-715b-4238-be20-7b1d748c917a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c64f1149-715b-4238-be20-7b1d748c917a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c64f1149-715b-4238-be20-7b1d748c917a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c64f1149-715b-4238-be20-7b1d748c917a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c64f1149-715b-4238-be20-7b1d748c917a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38492","PortSpecifier":{"PortValue":38492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38492","PortSpecifier":{"PortValue":38492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441170,"nanos":439717741},"http":{"id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","method":"GET","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cmeQuD56k8951Z1F_H9jzS6oawmUdJenZ4ljJK073dlYIICSwDizJp9m5zZb"}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cmeQuD56k8951Z1F_H9jzS6oawmUdJenZ4ljJK073dlYIICSwDizJp9m5zZb\"}"}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T16:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57eff0f9-3dd3-4ffe-aabe-fb8682e7732d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55800","PortSpecifier":{"PortValue":55800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55800","PortSpecifier":{"PortValue":55800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441192,"nanos":662098945},"http":{"id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70c14a62-8cee-4e9f-a536-48bdf2ad9106","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54312","PortSpecifier":{"PortValue":54312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54312","PortSpecifier":{"PortValue":54312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441192,"nanos":694122333},"http":{"id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/auth-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3215da00-b7ee-4c4b-a04c-c9cd0f5e4bc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55814","PortSpecifier":{"PortValue":55814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d73d56d-c794-40c4-9acc-616e0d984043","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55814","PortSpecifier":{"PortValue":55814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441192,"nanos":731360648},"http":{"id":"2d73d56d-c794-40c4-9acc-616e0d984043","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d73d56d-c794-40c4-9acc-616e0d984043","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54314","PortSpecifier":{"PortValue":54314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b839e3aa-1c68-4912-922f-d454a53746f2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54314","PortSpecifier":{"PortValue":54314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441192,"nanos":766209200},"http":{"id":"b839e3aa-1c68-4912-922f-d454a53746f2","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/auth-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b839e3aa-1c68-4912-922f-d454a53746f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44218","PortSpecifier":{"PortValue":44218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db773fbc-7552-4266-a7bf-742c22b09f16","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44218","PortSpecifier":{"PortValue":44218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441209,"nanos":911521597},"http":{"id":"db773fbc-7552-4266-a7bf-742c22b09f16","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db773fbc-7552-4266-a7bf-742c22b09f16","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42090","PortSpecifier":{"PortValue":42090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42090","PortSpecifier":{"PortValue":42090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441209,"nanos":948791103},"http":{"id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/auth-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23d4e0b6-fd08-49c9-a405-f47e8a8f007b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42094","PortSpecifier":{"PortValue":42094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","method":"GET","path":"/maas-api/v1/api-keys/91df0ee6-ff5a-4ecf-862f-c7e8a04d7c10","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42094","PortSpecifier":{"PortValue":42094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441209,"nanos":990424447},"http":{"id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","method":"GET","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91df0ee6-ff5a-4ecf-862f-c7e8a04d7c10",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91df0ee6-ff5a-4ecf-862f-c7e8a04d7c10",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/auth-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8e50b19-84ef-4068-b411-8a59fbb9a01a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dfc0690-bb3e-4261-af95-27655c85b977","method":"GET","path":"/maas-api/v1/api-keys/91df0ee6-ff5a-4ecf-862f-c7e8a04d7c10","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441210,"nanos":31016627},"http":{"id":"4dfc0690-bb3e-4261-af95-27655c85b977","method":"GET","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91df0ee6-ff5a-4ecf-862f-c7e8a04d7c10",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91df0ee6-ff5a-4ecf-862f-c7e8a04d7c10",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dfc0690-bb3e-4261-af95-27655c85b977","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6690010d-a5ab-4778-aeab-3295923e1554","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48454","PortSpecifier":{"PortValue":48454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6690010d-a5ab-4778-aeab-3295923e1554","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6690010d-a5ab-4778-aeab-3295923e1554","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48454","PortSpecifier":{"PortValue":48454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441227,"nanos":227844710},"http":{"id":"6690010d-a5ab-4778-aeab-3295923e1554","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6690010d-a5ab-4778-aeab-3295923e1554","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6690010d-a5ab-4778-aeab-3295923e1554","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6690010d-a5ab-4778-aeab-3295923e1554","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6690010d-a5ab-4778-aeab-3295923e1554","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6690010d-a5ab-4778-aeab-3295923e1554","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6690010d-a5ab-4778-aeab-3295923e1554","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6690010d-a5ab-4778-aeab-3295923e1554","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6690010d-a5ab-4778-aeab-3295923e1554","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6690010d-a5ab-4778-aeab-3295923e1554","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6690010d-a5ab-4778-aeab-3295923e1554","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6690010d-a5ab-4778-aeab-3295923e1554","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56894","PortSpecifier":{"PortValue":56894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98b67582-8f54-4f0e-9be8-42136752c74c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56894","PortSpecifier":{"PortValue":56894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441227,"nanos":262773096},"http":{"id":"98b67582-8f54-4f0e-9be8-42136752c74c","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/auth-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b67582-8f54-4f0e-9be8-42136752c74c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48458","PortSpecifier":{"PortValue":48458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48458","PortSpecifier":{"PortValue":48458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441227,"nanos":299393145},"http":{"id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WB2IGQ7FvP4HC21b_xVZPvxQ5k91Z0Y7uOVuyc11eGMxJbrNSemkto3s550A"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WB2IGQ7FvP4HC21b_xVZPvxQ5k91Z0Y7uOVuyc11eGMxJbrNSemkto3s550A\"}"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"180ded61-bf39-423c-bff3-1ed3c1ec4b6c","keyName":"e2e-auth-iso-a-2cfdfa","subscription":"e2e-auth-iso-dae1c4","tenant":"e2e-shared-a-382396","userId":"180ded61-bf39-423c-bff3-1ed3c1ec4b6c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/auth-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-dae1c4"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e2e5051-5075-4f79-9f84-02dedcd551f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43bf26988f555085e717f90a50650c7316a3abc1abf5c4249d12a79577c2e5d5"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7c7744c9fb6504cb8f155d2e076ba8266e203528718fb6bd0e61aca6683335d"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35ba4b62926cc983c0aa27305076d79533302438d18785b43d8cd568627b889f"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/690bb0125d66aa136f7cb99e78a2361bf66a92ab9eb9bccabe69b52fb24a620f"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99607e247067ac8fc04d8e4cc8bed5619a8bd56f93bc074ae04ea040e0cb2c52"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8269cde5dffebeec000a1aa0c798a645e5139a92eb21994b7a5a1bd6c37077a"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6d9d8da699327d4eeea65ea23e8356a8285ee206c47073f7730d29ed20bbccf"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9956f8cdd32e58fd4fd22705501d65641cc7c80f3bd22b8636def6c8aaa3c0a"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7c32e3b1f9571af6c469c74e3d81476ea9b6a729aa0e9683431aa7695640ad4"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac6ec0277553ce09e98741237c10d85e9354e72a4a032d01ec73cf996dd1bd39"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec435078b426656daab385186f7f14a0beae52e939bb8aacf666ef9264f6d3ca"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/211067484cc74844aefe0776acc5d5e623abfe1998399cd5816022f6e4dc0698"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2126985f147f4ee17be40b6390fccda9f981a2aca64ca8ed5a39d875502543fb"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e279e195d92690280cc703e6b60ebd9c0239f815d0928fbb1169642907b6e57"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a204baaddb3fc28c481ba5e75b31be75b43cb031dfa19f22783d1630d88b162a"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c34b20e1afb9919a2184fde84ac44aaecaa3d9c8ae570523de16ed3de0515373"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d"}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55"}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55"}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f"}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917"}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917"}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917"}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f"}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77"}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"}
{"level":"error","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77"}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8"}
{"level":"debug","ts":"2026-07-07T16:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8"}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d"}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf"}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94"}
{"level":"debug","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"info","ts":"2026-07-07T16:21:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55"}
{"level":"info","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"701cbe1d-f809-433f-ac14-76946be3b124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60962","PortSpecifier":{"PortValue":60962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"701cbe1d-f809-433f-ac14-76946be3b124","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"701cbe1d-f809-433f-ac14-76946be3b124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60962","PortSpecifier":{"PortValue":60962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441288,"nanos":240454804},"http":{"id":"701cbe1d-f809-433f-ac14-76946be3b124","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"701cbe1d-f809-433f-ac14-76946be3b124","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"701cbe1d-f809-433f-ac14-76946be3b124","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"701cbe1d-f809-433f-ac14-76946be3b124","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"701cbe1d-f809-433f-ac14-76946be3b124","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"701cbe1d-f809-433f-ac14-76946be3b124","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"701cbe1d-f809-433f-ac14-76946be3b124","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/sub-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"701cbe1d-f809-433f-ac14-76946be3b124","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"701cbe1d-f809-433f-ac14-76946be3b124","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"701cbe1d-f809-433f-ac14-76946be3b124","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"701cbe1d-f809-433f-ac14-76946be3b124","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"701cbe1d-f809-433f-ac14-76946be3b124","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50858","PortSpecifier":{"PortValue":50858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50858","PortSpecifier":{"PortValue":50858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441288,"nanos":283848490},"http":{"id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/sub-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20936ff6-1ad3-4b48-add5-f24a992e7f9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60972","PortSpecifier":{"PortValue":60972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60972","PortSpecifier":{"PortValue":60972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441288,"nanos":321185627},"http":{"id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","method":"GET","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15ztKo90ZQ4coqPDT_Sj65kLkmO0FIjWQQw4b9oUGHhdCDc0ikW9K4LPMyoxL"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15ztKo90ZQ4coqPDT_Sj65kLkmO0FIjWQQw4b9oUGHhdCDc0ikW9K4LPMyoxL\"}"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12765448-200c-4a3f-877b-1415af63a417","keyName":"e2e-sub-iso-b500e1","subscription":"e2e-a-only-1ebbdc","tenant":"e2e-shared-a-382396","userId":"12765448-200c-4a3f-877b-1415af63a417","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/sub-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-1ebbdc"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a822150c-e8da-4ac8-8d5c-9a77197d3588","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50860","PortSpecifier":{"PortValue":50860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50860","PortSpecifier":{"PortValue":50860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441288,"nanos":361957029},"http":{"id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","method":"GET","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xCayjqHVwWW337GU_jemtOFr7PtGLMH9pJDhHck3QeQndFGWJ292YiqnuHVE"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xCayjqHVwWW337GU_jemtOFr7PtGLMH9pJDhHck3QeQndFGWJ292YiqnuHVE\"}"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d786ce6b-d80e-4455-a882-a8d52af53444","keyName":"e2e-sub-iso-cc2ec8","subscription":"e2e-b-only-1ebbdc","tenant":"e2e-shared-b-17e556","userId":"d786ce6b-d80e-4455-a882-a8d52af53444","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/sub-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-1ebbdc"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c95fbef-aea8-47ca-a4a2-7942fb31b6ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"756cc564-ec72-474f-a128-583266964e3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59376","PortSpecifier":{"PortValue":59376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"756cc564-ec72-474f-a128-583266964e3b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"756cc564-ec72-474f-a128-583266964e3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59376","PortSpecifier":{"PortValue":59376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441305,"nanos":61600158},"http":{"id":"756cc564-ec72-474f-a128-583266964e3b","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"756cc564-ec72-474f-a128-583266964e3b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"756cc564-ec72-474f-a128-583266964e3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"756cc564-ec72-474f-a128-583266964e3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756cc564-ec72-474f-a128-583266964e3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756cc564-ec72-474f-a128-583266964e3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756cc564-ec72-474f-a128-583266964e3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/sub-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"756cc564-ec72-474f-a128-583266964e3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756cc564-ec72-474f-a128-583266964e3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756cc564-ec72-474f-a128-583266964e3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"756cc564-ec72-474f-a128-583266964e3b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"756cc564-ec72-474f-a128-583266964e3b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b015541-3f6f-447d-ad99-598f2718db31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40352","PortSpecifier":{"PortValue":40352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b015541-3f6f-447d-ad99-598f2718db31","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b015541-3f6f-447d-ad99-598f2718db31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40352","PortSpecifier":{"PortValue":40352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441305,"nanos":100407904},"http":{"id":"9b015541-3f6f-447d-ad99-598f2718db31","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b015541-3f6f-447d-ad99-598f2718db31","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b015541-3f6f-447d-ad99-598f2718db31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b015541-3f6f-447d-ad99-598f2718db31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b015541-3f6f-447d-ad99-598f2718db31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b015541-3f6f-447d-ad99-598f2718db31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b015541-3f6f-447d-ad99-598f2718db31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/sub-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b015541-3f6f-447d-ad99-598f2718db31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b015541-3f6f-447d-ad99-598f2718db31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b015541-3f6f-447d-ad99-598f2718db31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b015541-3f6f-447d-ad99-598f2718db31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b015541-3f6f-447d-ad99-598f2718db31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59392","PortSpecifier":{"PortValue":59392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59392","PortSpecifier":{"PortValue":59392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441305,"nanos":135544450},"http":{"id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Z9gI3UlbDBOBielW_ddkLLTSPrNG7peWIX3YFL8sztFUf8DEhs5lCOlhOQeK"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Z9gI3UlbDBOBielW_ddkLLTSPrNG7peWIX3YFL8sztFUf8DEhs5lCOlhOQeK\"}"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"364a41cb-4119-46c0-befe-d4be5675f363","keyName":"e2e-sub-iso-1c836a","subscription":"e2e-shared-sub-b36d9b","tenant":"e2e-shared-a-382396","userId":"364a41cb-4119-46c0-befe-d4be5675f363","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/sub-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b36d9b"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39f5b016-ff21-4a58-a57d-e403cc7e7139","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40356","PortSpecifier":{"PortValue":40356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40356","PortSpecifier":{"PortValue":40356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441305,"nanos":166987569},"http":{"id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CyvGzP3RL0FN5V0B_r4mx89zpTjP5OZVyDban9Ei1yADVm3gPSf88rRYaC9V"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CyvGzP3RL0FN5V0B_r4mx89zpTjP5OZVyDban9Ei1yADVm3gPSf88rRYaC9V\"}"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62501739-b17c-44c5-a3bd-e16998542e53","keyName":"e2e-sub-iso-b47243","subscription":"e2e-shared-sub-b36d9b","tenant":"e2e-shared-b-17e556","userId":"62501739-b17c-44c5-a3bd-e16998542e53","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/sub-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b36d9b"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12b6edd1-1c9c-4a15-a056-fb01477ba623","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bae08402a175e2d405dd7346b5ecadd521aad61506fa9d0f1f49fe1e09706734"}
{"level":"info","ts":"2026-07-07T16:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b78f51f163a025563abe2c7f9104a81cbd90737c83c223308de7ade5b85fa93d"}
{"level":"info","ts":"2026-07-07T16:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83cae69d04966faf16c571c5b45ce55f0074a8dd3d1bd466265a64db02370e94"}
{"level":"info","ts":"2026-07-07T16:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed9ef619d58515b5039ccffe482fadf4b8fa363155ea3ec6390b45490e4d070"}
{"level":"info","ts":"2026-07-07T16:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79320cee071a9052bcf1565f07c105cd3e7de150b95a00cd7cf821f7b90b25e8"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d76f85307637ca98918dfb759eb9ce5dd8f0ac232a75c11bc653c823889c884f"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a2b4e6602743a7cd819392de9a324369863670db5cc510b0644ed559965d55"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c49d2f0c3536151f9fbf476f18a5bf08dca7943cbcb63ff4b468d00c7bd3e73"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7d8d8c729583c866f08113ba0ee49ea59647214b2cd3a2968fdafc270efbe77"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e32a2aab5e930464646c37a851104e410c1071a23c5908d6f1c539b2d60688f6"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e55f62c24cec23a802397858d6234514d392bca88a5b0202c6f1d79300f17ccf"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9418905a8854d9a30fc4551bbabc3c38333954de983c8da73de3a613e6fb5fd8"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/410a62a7fcb40aaf14f6cb59b71b4ad1f4870dfcaedfd75696cf31fca4ca82c1"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2af61cf748e80770963893fdd615d7e89ec34af57970d2414a4a74bfa0c790f8"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0ec2fb40691bd9e2cbf7b63ee8611e008a8125b93956e252cf5afc88a13ea46"}
{"level":"info","ts":"2026-07-07T16:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54faaa20c038d0903bac008b676876e779821cc71269eb2fd18cb483d820f917"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0"}
{"level":"error","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"debug","ts":"2026-07-07T16:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97"}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972"}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97"}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972"}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97"}
{"level":"info","ts":"2026-07-07T16:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972"}
{"level":"debug","ts":"2026-07-07T16:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"}
{"level":"error","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794"}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3"}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"debug","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0"}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b"}
{"level":"info","ts":"2026-07-07T16:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97"}
{"level":"info","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46390","PortSpecifier":{"PortValue":46390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46390","PortSpecifier":{"PortValue":46390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441375,"nanos":854717505},"http":{"id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a92eda5-a7a4-4857-a239-108e2fd49a80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53568","PortSpecifier":{"PortValue":53568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b158d03-9cc1-4b20-97d5-466da9a24209","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53568","PortSpecifier":{"PortValue":53568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441375,"nanos":896484925},"http":{"id":"1b158d03-9cc1-4b20-97d5-466da9a24209","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/rate-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b158d03-9cc1-4b20-97d5-466da9a24209","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46406","PortSpecifier":{"PortValue":46406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46406","PortSpecifier":{"PortValue":46406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441375,"nanos":935759491},"http":{"id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O3fshDDLiKAGYzjw_vCLL8aaIsrLD72Ug3fRZlXAt6uqdHaYrgiCNuL6hdiv"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O3fshDDLiKAGYzjw_vCLL8aaIsrLD72Ug3fRZlXAt6uqdHaYrgiCNuL6hdiv\"}"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c17ca39-0de3-4597-a2d8-552dc1155cca","keyName":"e2e-rate-a-beb241","subscription":"e2e-rate-iso-a-beb241","tenant":"e2e-shared-a-382396","userId":"2c17ca39-0de3-4597-a2d8-552dc1155cca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-beb241\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-beb241","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-beb241"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2c17ca39-0de3-4597-a2d8-552dc1155cca","keyName":"e2e-rate-a-beb241","selected_subscription":"e2e-rate-iso-a-beb241","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-beb241@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-beb241","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb0d7d40-5dc5-412c-81ef-d8654b039dd4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:22:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46420","PortSpecifier":{"PortValue":46420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:22:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46420","PortSpecifier":{"PortValue":46420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441376,"nanos":998781832},"http":{"id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O3fshDDLiKAGYzjw_vCLL8aaIsrLD72Ug3fRZlXAt6uqdHaYrgiCNuL6hdiv"}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O3fshDDLiKAGYzjw_vCLL8aaIsrLD72Ug3fRZlXAt6uqdHaYrgiCNuL6hdiv\"}"}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c17ca39-0de3-4597-a2d8-552dc1155cca","keyName":"e2e-rate-a-beb241","subscription":"e2e-rate-iso-a-beb241","tenant":"e2e-shared-a-382396","userId":"2c17ca39-0de3-4597-a2d8-552dc1155cca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-beb241\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-beb241","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-beb241"}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2c17ca39-0de3-4597-a2d8-552dc1155cca","keyName":"e2e-rate-a-beb241","selected_subscription":"e2e-rate-iso-a-beb241","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-beb241@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-beb241","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:22:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52799444-6c63-4643-9ff3-2a9fa5c2f594","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46426","PortSpecifier":{"PortValue":46426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46426","PortSpecifier":{"PortValue":46426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441378,"nanos":41215402},"http":{"id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O3fshDDLiKAGYzjw_vCLL8aaIsrLD72Ug3fRZlXAt6uqdHaYrgiCNuL6hdiv"}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O3fshDDLiKAGYzjw_vCLL8aaIsrLD72Ug3fRZlXAt6uqdHaYrgiCNuL6hdiv\"}"}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c17ca39-0de3-4597-a2d8-552dc1155cca","keyName":"e2e-rate-a-beb241","subscription":"e2e-rate-iso-a-beb241","tenant":"e2e-shared-a-382396","userId":"2c17ca39-0de3-4597-a2d8-552dc1155cca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-beb241\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-beb241","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-beb241"}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2c17ca39-0de3-4597-a2d8-552dc1155cca","keyName":"e2e-rate-a-beb241","selected_subscription":"e2e-rate-iso-a-beb241","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-beb241@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-beb241","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:22:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e48a2ac-855e-4678-837f-4ae6ce58a841","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41216","PortSpecifier":{"PortValue":41216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41216","PortSpecifier":{"PortValue":41216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441393,"nanos":979776026},"http":{"id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b5bd895-d7ee-4cf1-aeda-64733d243899","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49284","PortSpecifier":{"PortValue":49284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49284","PortSpecifier":{"PortValue":49284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441394,"nanos":16362256},"http":{"id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"]}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/448c2ab40b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99876a64-866e-484e-8efe-91011eab48a8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50669605-41c7-4b46-b8b2-5cae8262d39d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/rate-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c1da84c-9bb8-4bf6-96df-14b1d9ed43ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41222","PortSpecifier":{"PortValue":41222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41222","PortSpecifier":{"PortValue":41222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441394,"nanos":56760709},"http":{"id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l\"}"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","subscription":"e2e-rate-iso-a-df747c","tenant":"e2e-shared-a-382396","userId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-df747c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df747c"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","selected_subscription":"e2e-rate-iso-a-df747c","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-df747c@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b05cee46-2144-43c7-bc05-3c9ee90c8b21","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41236","PortSpecifier":{"PortValue":41236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41236","PortSpecifier":{"PortValue":41236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441395,"nanos":92986523},"http":{"id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l"}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l\"}"}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","subscription":"e2e-rate-iso-a-df747c","tenant":"e2e-shared-a-382396","userId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-df747c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df747c"}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","selected_subscription":"e2e-rate-iso-a-df747c","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-df747c@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5123cac4-61e5-4787-8e5e-c33dbd930d4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41240","PortSpecifier":{"PortValue":41240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41240","PortSpecifier":{"PortValue":41240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441396,"nanos":128822332},"http":{"id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l"}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l\"}"}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","subscription":"e2e-rate-iso-a-df747c","tenant":"e2e-shared-a-382396","userId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-df747c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df747c"}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","selected_subscription":"e2e-rate-iso-a-df747c","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-df747c@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49fdb42e-ffbd-46e8-8a61-0f790e7e4a84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41252","PortSpecifier":{"PortValue":41252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"545546f2-fe4b-4371-aac6-3eefd16851d0","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41252","PortSpecifier":{"PortValue":41252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441397,"nanos":168778178},"http":{"id":"545546f2-fe4b-4371-aac6-3eefd16851d0","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l"}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l\"}"}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","subscription":"e2e-rate-iso-a-df747c","tenant":"e2e-shared-a-382396","userId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-df747c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df747c"}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","selected_subscription":"e2e-rate-iso-a-df747c","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-df747c@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"545546f2-fe4b-4371-aac6-3eefd16851d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41254","PortSpecifier":{"PortValue":41254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41254","PortSpecifier":{"PortValue":41254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441398,"nanos":206081049},"http":{"id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l"}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l\"}"}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","subscription":"e2e-rate-iso-a-df747c","tenant":"e2e-shared-a-382396","userId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-df747c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df747c"}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","selected_subscription":"e2e-rate-iso-a-df747c","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-df747c@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca9c1f44-e8ad-4116-86f4-7a8e449f6b78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41262","PortSpecifier":{"PortValue":41262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41262","PortSpecifier":{"PortValue":41262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441399,"nanos":242635519},"http":{"id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l"}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l\"}"}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","subscription":"e2e-rate-iso-a-df747c","tenant":"e2e-shared-a-382396","userId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-df747c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df747c"}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","selected_subscription":"e2e-rate-iso-a-df747c","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-df747c@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ee6ef7c-6031-42c7-9cb0-e010515f7ead","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55522","PortSpecifier":{"PortValue":55522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55522","PortSpecifier":{"PortValue":55522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441400,"nanos":281405050},"http":{"id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l"}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l\"}"}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","subscription":"e2e-rate-iso-a-df747c","tenant":"e2e-shared-a-382396","userId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-df747c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df747c"}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","selected_subscription":"e2e-rate-iso-a-df747c","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-df747c@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c383b3b1-ada2-4973-8766-ab77f8d22e70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01360215-10b4-4a69-af3c-823f3d184691","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55528","PortSpecifier":{"PortValue":55528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01360215-10b4-4a69-af3c-823f3d184691","method":"POST","path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions","host":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01360215-10b4-4a69-af3c-823f3d184691","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55528","PortSpecifier":{"PortValue":55528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441401,"nanos":316051075},"http":{"id":"01360215-10b4-4a69-af3c-823f3d184691","method":"POST","headers":{":authority":"e2e-shared-a-382396.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-382396/rate-test-model-382396/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xjz36URzb0ApcmET_lvyM8rFBLVb4Wapk1ZXnGiXwQsBCynMOcwKid7ZEC8l\"}"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","subscription":"e2e-rate-iso-a-df747c","tenant":"e2e-shared-a-382396","userId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\",\"requestedSubscription\":\"e2e-rate-iso-a-df747c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-382396.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01360215-10b4-4a69-af3c-823f3d184691","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-382396/rate-test-model-382396\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df747c"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01360215-10b4-4a69-af3c-823f3d184691","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"adfa1ffb-6ef1-4ece-97ef-24b778d9f97a","keyName":"e2e-rate-a-df747c","selected_subscription":"e2e-rate-iso-a-df747c","selected_subscription_key":"ai-tenant-e2e-shared-a-382396/e2e-rate-iso-a-df747c@ai-tenant-e2e-shared-a-382396/rate-test-model-382396","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-382396","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df747c","namespace":"ai-tenant-e2e-shared-a-382396","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01360215-10b4-4a69-af3c-823f3d184691","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01360215-10b4-4a69-af3c-823f3d184691","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc396216-2467-440c-8ba8-ca7958393511","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54210","PortSpecifier":{"PortValue":54210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc396216-2467-440c-8ba8-ca7958393511","method":"POST","path":"/ai-tenant-e2e-shared-b-17e556/rate-test-model-17e556/v1/completions","host":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc396216-2467-440c-8ba8-ca7958393511","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54210","PortSpecifier":{"PortValue":54210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441401,"nanos":351963867},"http":{"id":"bc396216-2467-440c-8ba8-ca7958393511","method":"POST","headers":{":authority":"e2e-shared-b-17e556.apps.16f7e6e2-9f92-415e-a87c-448c2ab40b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-17e556/rate-test-model-17e556/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14aVPHbwSxt9CbNct_wSfr0wqciS0tgUIBqai6mM4GZgwFAFETulOSTgwt7Cq"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14aVPHbwSxt9CbNct_wSfr0wqciS0tgUIBqai6mM4GZgwFAFETulOSTgwt7Cq\"}"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49477352-2886-4e19-b175-37160dab9b63","keyName":"e2e-rate-b-df747c","subscription":"e2e-rate-iso-b-df747c","tenant":"e2e-shared-b-17e556","userId":"49477352-2886-4e19-b175-37160dab9b63","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-17e556/rate-test-model-17e556\",\"requestedSubscription\":\"e2e-rate-iso-b-df747c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17e556.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17e556","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-df747c","namespace":"ai-tenant-e2e-shared-b-17e556","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc396216-2467-440c-8ba8-ca7958393511","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17e556/rate-test-model-17e556\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-df747c"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc396216-2467-440c-8ba8-ca7958393511","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49477352-2886-4e19-b175-37160dab9b63","keyName":"e2e-rate-b-df747c","selected_subscription":"e2e-rate-iso-b-df747c","selected_subscription_key":"ai-tenant-e2e-shared-b-17e556/e2e-rate-iso-b-df747c@ai-tenant-e2e-shared-b-17e556/rate-test-model-17e556","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17e556","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-df747c","namespace":"ai-tenant-e2e-shared-b-17e556","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc396216-2467-440c-8ba8-ca7958393511","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc396216-2467-440c-8ba8-ca7958393511","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5de82c5aec7e5c9225d4978b05f6462c2a28003ea02a7ec59d304bf2543cd9b"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc786a58890f8ec7728949e9711c99d9365562422caab843be45f1b73236bc97"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3268d38517941e93871c90339bf65caa3aaefe4bf95dfda5092d56cc59883088"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc936591b727eed50ee10cdc3ee15d303798ea5dc0359890c887d94c91b1b5b3"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6df9cd07ce8afeed7139a025a10cba2e85a3b58fe678d9f5985b42dbe8b03413"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddd59233bdd47780c4811019585c3dad2ca0530500ba4b15047953a8f47479d5"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6de20ac261798dcfa45d0e8008a542d133f99066b22846a65e6dfaeeaa6221c"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79371936cd2335651afa1c7a02e264f2b4655284d32e5d33d8fa720a05f092a7"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e93aa20cf59e8c3f6497da361fa1bc4bc7aa89c9f1ddd967bf34bf59f380492"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee0d36db43f379b96fe9c61e2b61a7301e0ccabc8fdac91090d2c1ff57b21f7b"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a73b9fadf17beb5182c87b4bc15cd2b34eab14c8e943a8c9f6367853d84972"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8fb342d890b13f22e4dc1d3ece45d457d2ae0ab0831316fcff2db25b17efe22"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5673222e0ee20fb6b9bfc9805c52836835669997c9cd10579c1a699579f9794"}
{"level":"info","ts":"2026-07-07T16:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b2e8667827e8889cc39638a8439f85d43fd8930dc544f13e74d460a2989f36d"}
{"level":"info","ts":"2026-07-07T16:23:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da0498e4adfed543512862711c263e1b5a0e8f4b7fff53f96061c81ecf9d4dc2"}
{"level":"info","ts":"2026-07-07T16:23:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/987aaf86533edd9636690c27e7db458ba29e4fc88d799d19d92ea227fbdb5bd0"}
{"level":"info","ts":"2026-07-07T16:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5d430326b546cc934dffa1510159f4bc0aa2666d8b4176005592f150a958fa4"}
{"level":"info","ts":"2026-07-07T16:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5fbf0a8489c0a06af2c3ea5e569414594709ecec73f7d9c1f85aa971fa82474"}
{"level":"info","ts":"2026-07-07T16:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3600b038a7736a51627ccfbf1a96a2c3d1c3d2e7c4d137c772b236e345bbbcbc"}
{"level":"info","ts":"2026-07-07T16:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d67bbaf0bbbe2c0d70ec1e1164f9419c36d207e330d84351cff7ac9589aa6a46"}