--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d95afbef8766603cf3f797b1c2e81b01da600bcba6a2137951333bdfed7a1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5443c5adf7fc6d8730f5e24bd891541fa50261e6d7f99e2c197a2304dfe77a57"}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d95afbef8766603cf3f797b1c2e81b01da600bcba6a2137951333bdfed7a1c5"}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e745e10204c838d03cc9f960a9dc3acfd69a90fe4c53ca5c28f38dd0c80f74a"}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8de30b36c8cf7a0ed32394984122be4af02102dbef45e5a8c1c673b070a1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b"}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8de30b36c8cf7a0ed32394984122be4af02102dbef45e5a8c1c673b070a1e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8de30b36c8cf7a0ed32394984122be4af02102dbef45e5a8c1c673b070a1e1"}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8de30b36c8cf7a0ed32394984122be4af02102dbef45e5a8c1c673b070a1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8de30b36c8cf7a0ed32394984122be4af02102dbef45e5a8c1c673b070a1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8de30b36c8cf7a0ed32394984122be4af02102dbef45e5a8c1c673b070a1e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b"}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8de30b36c8cf7a0ed32394984122be4af02102dbef45e5a8c1c673b070a1e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42"}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:13:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8de30b36c8cf7a0ed32394984122be4af02102dbef45e5a8c1c673b070a1e1"}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b"}
{"level":"info","ts":"2026-07-07T00:13:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42"}
{"level":"info","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56508","PortSpecifier":{"PortValue":56508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-02e2a5.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56508","PortSpecifier":{"PortValue":56508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383228,"nanos":799862956},"http":{"id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","method":"POST","headers":{":authority":"e2e-inf-a-02e2a5.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58c05214d542849fed8d9a6f8dedf71e90ed01c79654a32546e606ce5af05a5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-02e2a5.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-02e2a5/test-model-02e2a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:13:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ba51e48-593f-4f58-9072-e7d1babfa1ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c49c1c65-063d-4886-a291-279d624230b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56522","PortSpecifier":{"PortValue":56522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c49c1c65-063d-4886-a291-279d624230b9","method":"POST","path":"/ai-tenant-e2e-inf-a-02e2a5/test-model-02e2a5/v1/chat/completions","host":"e2e-inf-a-02e2a5.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c49c1c65-063d-4886-a291-279d624230b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56522","PortSpecifier":{"PortValue":56522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383232,"nanos":867422772},"http":{"id":"c49c1c65-063d-4886-a291-279d624230b9","method":"POST","headers":{":authority":"e2e-inf-a-02e2a5.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-02e2a5/test-model-02e2a5/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-315Eccqu46u687Cu_ASsPq9oaUGCxNy9q475i5N33UJl4ToE2KFirc8Hb3bg"}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-02e2a5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-315Eccqu46u687Cu_ASsPq9oaUGCxNy9q475i5N33UJl4ToE2KFirc8Hb3bg\"}"}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-02e2a5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24ca68d0-efab-4327-9758-39dd3e672fd0","keyName":"e2e-tenant-inference-02e2a5","subscription":"test-model-02e2a5-sub","tenant":"e2e-inf-a-02e2a5","userId":"24ca68d0-efab-4327-9758-39dd3e672fd0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-02e2a5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-02e2a5/test-model-02e2a5\",\"requestedSubscription\":\"test-model-02e2a5-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-02e2a5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-02e2a5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-02e2a5-sub","namespace":"ai-tenant-e2e-inf-a-02e2a5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c49c1c65-063d-4886-a291-279d624230b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-02e2a5/test-model-02e2a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-02e2a5-sub"}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c49c1c65-063d-4886-a291-279d624230b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24ca68d0-efab-4327-9758-39dd3e672fd0","keyName":"e2e-tenant-inference-02e2a5","selected_subscription":"test-model-02e2a5-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-02e2a5/test-model-02e2a5-sub@ai-tenant-e2e-inf-a-02e2a5/test-model-02e2a5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-02e2a5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-02e2a5-sub","namespace":"ai-tenant-e2e-inf-a-02e2a5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c49c1c65-063d-4886-a291-279d624230b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:13:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c49c1c65-063d-4886-a291-279d624230b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56532","PortSpecifier":{"PortValue":56532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00f55b36-22df-4bdb-b06a-2c207001413b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-02e2a5.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56532","PortSpecifier":{"PortValue":56532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383233,"nanos":193528722},"http":{"id":"00f55b36-22df-4bdb-b06a-2c207001413b","method":"POST","headers":{":authority":"e2e-inf-a-02e2a5.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58c05214d542849fed8d9a6f8dedf71e90ed01c79654a32546e606ce5af05a5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-02e2a5.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-02e2a5/test-model-02e2a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00f55b36-22df-4bdb-b06a-2c207001413b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50030","PortSpecifier":{"PortValue":50030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02434148-a3c5-4d68-93f3-c36915cb9e67","method":"POST","path":"/ai-tenant-e2e-inf-b-b40adc/test-model-b40adc/v1/chat/completions","host":"e2e-inf-b-b40adc.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50030","PortSpecifier":{"PortValue":50030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383233,"nanos":233529490},"http":{"id":"02434148-a3c5-4d68-93f3-c36915cb9e67","method":"POST","headers":{":authority":"e2e-inf-b-b40adc.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-b40adc/test-model-b40adc/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3a6pGOJVBQ8ErNNw_snhfzNxF1l1qFcFCk8Nq4huPMsruygndquig9k33n0u"}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-b40adc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3a6pGOJVBQ8ErNNw_snhfzNxF1l1qFcFCk8Nq4huPMsruygndquig9k33n0u\"}"}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-b40adc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-b40adc.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d105b48b8cb545f5ddb7aba4f879a0a297e421e7ad4363e2da099f877238522e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-b40adc.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-b40adc/test-model-b40adc/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02434148-a3c5-4d68-93f3-c36915cb9e67","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5443c5adf7fc6d8730f5e24bd891541fa50261e6d7f99e2c197a2304dfe77a57"}
{"level":"info","ts":"2026-07-07T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff3dcfd0c0f7b7d2648750fb42da41672f81ea23e580d04fa400d1a4a28cf971"}
{"level":"info","ts":"2026-07-07T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8ef896c9ddb5cd741015f78a84adaf3b2eb1fb69262122927a476e47229ca0d"}
{"level":"info","ts":"2026-07-07T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58c05214d542849fed8d9a6f8dedf71e90ed01c79654a32546e606ce5af05a5e"}
{"level":"info","ts":"2026-07-07T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acfe1a497cc57f59b9d8f8cc4c74f6e5357a198995880cf2cf8c472812757207"}
{"level":"info","ts":"2026-07-07T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33eb816ca59afd5987f0f37a4eac0f2a0fb1e3f75b99b8fcb4852fd090e1143e"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a48863ee709a59c8cf428f386fab9f42a40b1b9396426c09e30f870d78ee9131"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82e6f96dcdf44b978adf3a6835eb31d0604c95340156f3147bd0fbd0a3d3c14e"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36c7e4f92b6917d0cb29e3ef9f40b07be72676838e8554f21b590f73965bbd03"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a8de30b36c8cf7a0ed32394984122be4af02102dbef45e5a8c1c673b070a1e1"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd5f87c4e76213deeaf698ed77a403afbaef6cb00242842c38732ac7452774ff"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d105b48b8cb545f5ddb7aba4f879a0a297e421e7ad4363e2da099f877238522e"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edfc1e5062aaf91504f93e519014534c83d42ffaa2afbb6f9f31b0d974ac4c42"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/badbd4feb364998c007206ace1a238ceaf4fe094cd9c93b9e6bbff92ea1e378b"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f55a0181410380fc3fecfe1d2cad7189a4d60524c5f7903df4ea2021354d567"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db8cea4f548a4f568ad5a0fe26e8b65d052cf92fc56531e2b2658ff2ea86944d"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d080e559bfb72c2e8d5539fc7e061389a96fb127625a85a87c80748a9d7a572c"}
{"level":"info","ts":"2026-07-07T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d95afbef8766603cf3f797b1c2e81b01da600bcba6a2137951333bdfed7a1c5"}
{"level":"info","ts":"2026-07-07T00:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e745e10204c838d03cc9f960a9dc3acfd69a90fe4c53ca5c28f38dd0c80f74a"}
{"level":"info","ts":"2026-07-07T00:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f44715611227b72ebfd3215bb07081ec47b2da03a90b26c81e9cd0298ab8f2b"}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"}
{"level":"error","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"}
{"level":"error","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"}
{"level":"debug","ts":"2026-07-07T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e"}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e"}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e"}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"debug","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"debug","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"debug","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"debug","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"info","ts":"2026-07-07T00:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b8ec5ed57855123ecb9418a5bbcfe5744d9a07032bc07947d4888e90eb2e88"}
{"level":"info","ts":"2026-07-07T00:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae3c17dc432de75c530b1ade031725861547a8d56b9ef906d5fd14c890cbdc44"}
{"level":"info","ts":"2026-07-07T00:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a0332a42d640e276bf28eac10b0c4a17130d7fff3f278f961c6cf47e0d0e26e"}
{"level":"info","ts":"2026-07-07T00:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0b4f96c9516fe50b7886313209a323fca0cebfa1bc4a423dfa39b8ca402ce20"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02"}
{"level":"error","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02"}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02"}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61"}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61"}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02"}
{"level":"info","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/201f7b11953f260509986eea461f4a03809eeb84aa457f7bc31015aa4dbf8904"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"201f7b11953f260509986eea461f4a03809eeb84aa457f7bc31015aa4dbf8904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["201f7b11953f260509986eea461f4a03809eeb84aa457f7bc31015aa4dbf8904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"201f7b11953f260509986eea461f4a03809eeb84aa457f7bc31015aa4dbf8904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"201f7b11953f260509986eea461f4a03809eeb84aa457f7bc31015aa4dbf8904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/201f7b11953f260509986eea461f4a03809eeb84aa457f7bc31015aa4dbf8904"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19"}
{"level":"info","ts":"2026-07-07T00:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557"}
{"level":"debug","ts":"2026-07-07T00:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"debug","ts":"2026-07-07T00:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"error","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"}
{"level":"error","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0"}
{"level":"debug","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0"}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76"}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0"}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76"}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2"}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2"}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2"}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957"}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2"}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366"}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957"}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2"}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366"}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555"}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957"}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366"}
{"level":"info","ts":"2026-07-07T00:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555"}
{"level":"info","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55220","PortSpecifier":{"PortValue":55220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55220","PortSpecifier":{"PortValue":55220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383410,"nanos":20088821},"http":{"id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6dee4a8-3376-4f15-941e-4ea73287b88c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56228","PortSpecifier":{"PortValue":56228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c2fa31d-1802-4e94-bde4-d950475544c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56228","PortSpecifier":{"PortValue":56228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383410,"nanos":81734162},"http":{"id":"8c2fa31d-1802-4e94-bde4-d950475544c6","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/auth-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2fa31d-1802-4e94-bde4-d950475544c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55236","PortSpecifier":{"PortValue":55236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f70f549a-ff64-43b4-b00c-094a0edb1637","method":"GET","path":"/maas-api/v1/api-keys/5a9ddd82-f8dd-4dca-8e09-802151301555","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55236","PortSpecifier":{"PortValue":55236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383410,"nanos":170500306},"http":{"id":"f70f549a-ff64-43b4-b00c-094a0edb1637","method":"GET","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5a9ddd82-f8dd-4dca-8e09-802151301555",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5a9ddd82-f8dd-4dca-8e09-802151301555",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f70f549a-ff64-43b4-b00c-094a0edb1637","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56232","PortSpecifier":{"PortValue":56232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","method":"GET","path":"/maas-api/v1/api-keys/a4c009e9-5cb1-40b9-a0f6-882a84576363","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56232","PortSpecifier":{"PortValue":56232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383410,"nanos":210408798},"http":{"id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","method":"GET","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a4c009e9-5cb1-40b9-a0f6-882a84576363",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a4c009e9-5cb1-40b9-a0f6-882a84576363",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/auth-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f280f2a4-874f-4bef-b70b-92240afd6cfc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50268","PortSpecifier":{"PortValue":50268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50268","PortSpecifier":{"PortValue":50268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383427,"nanos":400969043},"http":{"id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6db65840-a0f6-4eb4-ae2e-39d5f3e9c95d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02b56588-fe46-42f3-92e2-510000226f6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56428","PortSpecifier":{"PortValue":56428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02b56588-fe46-42f3-92e2-510000226f6e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02b56588-fe46-42f3-92e2-510000226f6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56428","PortSpecifier":{"PortValue":56428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383427,"nanos":437713304},"http":{"id":"02b56588-fe46-42f3-92e2-510000226f6e","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"02b56588-fe46-42f3-92e2-510000226f6e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02b56588-fe46-42f3-92e2-510000226f6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02b56588-fe46-42f3-92e2-510000226f6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02b56588-fe46-42f3-92e2-510000226f6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02b56588-fe46-42f3-92e2-510000226f6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02b56588-fe46-42f3-92e2-510000226f6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/auth-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02b56588-fe46-42f3-92e2-510000226f6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02b56588-fe46-42f3-92e2-510000226f6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02b56588-fe46-42f3-92e2-510000226f6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02b56588-fe46-42f3-92e2-510000226f6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02b56588-fe46-42f3-92e2-510000226f6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50282","PortSpecifier":{"PortValue":50282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50282","PortSpecifier":{"PortValue":50282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383427,"nanos":479895660},"http":{"id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","method":"GET","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U0iL5DQJixdXB6ZN_6JxbMCiXHjyOoai8Dztz1j89EIJqpcHccVHJ7OJMheD"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U0iL5DQJixdXB6ZN_6JxbMCiXHjyOoai8Dztz1j89EIJqpcHccVHJ7OJMheD\"}"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb3d1b81-f305-47ae-87f4-83a3a8c673c8","keyName":"e2e-auth-iso-a-2eac30","subscription":"e2e-auth-iso-4f3df2","tenant":"e2e-shared-a-aedad1","userId":"bb3d1b81-f305-47ae-87f4-83a3a8c673c8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4f3df2"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c2d6d60-15b2-4a3d-9e8b-092074b04e4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58156","PortSpecifier":{"PortValue":58156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b35d0615-cb08-4a15-a8d1-797953646fa6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58156","PortSpecifier":{"PortValue":58156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383444,"nanos":870603378},"http":{"id":"b35d0615-cb08-4a15-a8d1-797953646fa6","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b35d0615-cb08-4a15-a8d1-797953646fa6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42520","PortSpecifier":{"PortValue":42520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42520","PortSpecifier":{"PortValue":42520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383444,"nanos":913748101},"http":{"id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/auth-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"662be0c0-0cd3-458b-9e00-a50fdc7c86f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42528","PortSpecifier":{"PortValue":42528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6318e946-294b-4476-8f5a-e3b52525ce49","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42528","PortSpecifier":{"PortValue":42528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383444,"nanos":952710474},"http":{"id":"6318e946-294b-4476-8f5a-e3b52525ce49","method":"GET","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LuoK1hv8GayV0aOi_dLZsTXw1IjJrb8lWRkV0roBC34UuIB6R40oOqVA7egV"}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LuoK1hv8GayV0aOi_dLZsTXw1IjJrb8lWRkV0roBC34UuIB6R40oOqVA7egV\"}"}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6318e946-294b-4476-8f5a-e3b52525ce49","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87ef44c2-23c6-4310-af91-430cddc72044","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37352","PortSpecifier":{"PortValue":37352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87ef44c2-23c6-4310-af91-430cddc72044","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87ef44c2-23c6-4310-af91-430cddc72044","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37352","PortSpecifier":{"PortValue":37352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383462,"nanos":108324874},"http":{"id":"87ef44c2-23c6-4310-af91-430cddc72044","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87ef44c2-23c6-4310-af91-430cddc72044","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87ef44c2-23c6-4310-af91-430cddc72044","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87ef44c2-23c6-4310-af91-430cddc72044","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87ef44c2-23c6-4310-af91-430cddc72044","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87ef44c2-23c6-4310-af91-430cddc72044","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87ef44c2-23c6-4310-af91-430cddc72044","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87ef44c2-23c6-4310-af91-430cddc72044","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87ef44c2-23c6-4310-af91-430cddc72044","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87ef44c2-23c6-4310-af91-430cddc72044","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87ef44c2-23c6-4310-af91-430cddc72044","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87ef44c2-23c6-4310-af91-430cddc72044","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43940","PortSpecifier":{"PortValue":43940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43940","PortSpecifier":{"PortValue":43940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383462,"nanos":146120680},"http":{"id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/auth-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dc4b52c-a894-43b9-99ae-13580d5fd46b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37358","PortSpecifier":{"PortValue":37358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37358","PortSpecifier":{"PortValue":37358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383462,"nanos":188972812},"http":{"id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36e2fbe3-c240-43c2-9ab8-caeec2df12f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43950","PortSpecifier":{"PortValue":43950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43950","PortSpecifier":{"PortValue":43950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383462,"nanos":221672094},"http":{"id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/auth-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05c5e464-7a93-496c-ba34-9c0b5a500be3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34068","PortSpecifier":{"PortValue":34068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34068","PortSpecifier":{"PortValue":34068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383477,"nanos":281238823},"http":{"id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b38881-3148-434a-a6b0-ff0ec3bfdc14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48070","PortSpecifier":{"PortValue":48070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48070","PortSpecifier":{"PortValue":48070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383477,"nanos":324001996},"http":{"id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/auth-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff432cdb-9c40-4f2a-b1ef-1a394ca9f22d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48082","PortSpecifier":{"PortValue":48082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2418002-46fc-42d8-b656-a9664dd02b99","method":"GET","path":"/maas-api/v1/api-keys/1caee8ff-458e-4217-b181-0a5b7ede1ba4","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48082","PortSpecifier":{"PortValue":48082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383477,"nanos":369107333},"http":{"id":"c2418002-46fc-42d8-b656-a9664dd02b99","method":"GET","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1caee8ff-458e-4217-b181-0a5b7ede1ba4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1caee8ff-458e-4217-b181-0a5b7ede1ba4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/auth-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2418002-46fc-42d8-b656-a9664dd02b99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34076","PortSpecifier":{"PortValue":34076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cebdf77b-80ee-4574-a787-b3bf28974a11","method":"GET","path":"/maas-api/v1/api-keys/1caee8ff-458e-4217-b181-0a5b7ede1ba4","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34076","PortSpecifier":{"PortValue":34076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383477,"nanos":400579894},"http":{"id":"cebdf77b-80ee-4574-a787-b3bf28974a11","method":"GET","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1caee8ff-458e-4217-b181-0a5b7ede1ba4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1caee8ff-458e-4217-b181-0a5b7ede1ba4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cebdf77b-80ee-4574-a787-b3bf28974a11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36084","PortSpecifier":{"PortValue":36084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36084","PortSpecifier":{"PortValue":36084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383492,"nanos":394513426},"http":{"id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83eb9ff4-0f55-4713-85aa-2cf9242eb4ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39042","PortSpecifier":{"PortValue":39042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"511d8d95-08f7-419f-aa42-10ed17a11b18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39042","PortSpecifier":{"PortValue":39042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383492,"nanos":433506844},"http":{"id":"511d8d95-08f7-419f-aa42-10ed17a11b18","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/auth-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"511d8d95-08f7-419f-aa42-10ed17a11b18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36088","PortSpecifier":{"PortValue":36088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36088","PortSpecifier":{"PortValue":36088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383492,"nanos":476111932},"http":{"id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OzQXrZ5jFjWnjiXA_SBMxKX9FP5uhLVc6C8pxa1CrUytgvJzXGioh8iTUt1t"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OzQXrZ5jFjWnjiXA_SBMxKX9FP5uhLVc6C8pxa1CrUytgvJzXGioh8iTUt1t\"}"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8e9f562-d6f4-4ac7-931f-845363377194","keyName":"e2e-auth-iso-a-661b24","subscription":"e2e-auth-iso-7465b1","tenant":"e2e-shared-a-aedad1","userId":"f8e9f562-d6f4-4ac7-931f-845363377194","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/auth-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7465b1"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:18:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef950bd4-c13d-44d4-9daa-efeeff48e015","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1527b8e1167ed7531cffdd0823198e3a3839b5bd70a61dbc32870b760825f557"}
{"level":"info","ts":"2026-07-07T00:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b83e77f97dd1d85e70a14b963264c5fe2b748cabc59eb0169bc90816a549ada0"}
{"level":"info","ts":"2026-07-07T00:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b62483a527aea1b318bd2aba0fe0cc1f1c2e06347389ff31d67e6171fc5ab80"}
{"level":"info","ts":"2026-07-07T00:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82189567f468e3f52fcdda0b2523049fbb910c72de860b56eaa2c544fc815f02"}
{"level":"info","ts":"2026-07-07T00:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/201f7b11953f260509986eea461f4a03809eeb84aa457f7bc31015aa4dbf8904"}
{"level":"info","ts":"2026-07-07T00:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c01e7ad533630d1afc5e5250c70f64f77c0519eeb7afdb52408af2509b5d4b61"}
{"level":"info","ts":"2026-07-07T00:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/454aa8bab894b40c1535ba644c7b830a6165406083e0403ea44bb080525a5b0d"}
{"level":"info","ts":"2026-07-07T00:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69c0e747100fcc1533c25abb5a269407316ca684d24e8dee0626bf2f27d15d19"}
{"level":"info","ts":"2026-07-07T00:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe518dc2e0f31d89cea4da448c660d286b910435ac01d648295d6626b0ef5ff2"}
{"level":"info","ts":"2026-07-07T00:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92e8370c5df53102bc46c7dbd7824b5e82b5dd4b0497719b530346a81e118366"}
{"level":"info","ts":"2026-07-07T00:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9610f83b2d56ef9b2a714d5755110ee77e30473b1c55ab7f6bd0127ea63e5957"}
{"level":"info","ts":"2026-07-07T00:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a761867873a6c3042ed2cbf813d98d45e482621f7c8f812d594ad3749c64a3b5"}
{"level":"info","ts":"2026-07-07T00:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b76c6d585f3fa1add8e9511e05556c25b1ece06b992bfb649b68894e3529baa0"}
{"level":"info","ts":"2026-07-07T00:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/647f47cf7fd95e285443a47ed31ff6186fd5cf6e476515d225743e899228ae9f"}
{"level":"info","ts":"2026-07-07T00:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7083d555ab4e18277de4ce940365a34e1134f016c5abed831b04a75f1dd1be76"}
{"level":"info","ts":"2026-07-07T00:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa887b5e51cdcb5dad3069a8d4d1c5b3133d9fbd21a89f5deeea0868b3128555"}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5"}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5"}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5"}
{"level":"error","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"error","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123"}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"error","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"error","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"}
{"level":"error","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"}
{"level":"error","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"debug","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705"}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9"}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9"}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705"}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5"}
{"level":"debug","ts":"2026-07-07T00:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"}
{"level":"info","ts":"2026-07-07T00:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"debug","ts":"2026-07-07T00:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123"}
{"level":"debug","ts":"2026-07-07T00:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b"}
{"level":"info","ts":"2026-07-07T00:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c"}
{"level":"info","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41584","PortSpecifier":{"PortValue":41584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3be8807b-a12f-41f4-8162-6b6bb4491409","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41584","PortSpecifier":{"PortValue":41584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383576,"nanos":560996060},"http":{"id":"3be8807b-a12f-41f4-8162-6b6bb4491409","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/sub-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3be8807b-a12f-41f4-8162-6b6bb4491409","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39912","PortSpecifier":{"PortValue":39912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd9f3176-e516-4339-8547-c54a1e836cf0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39912","PortSpecifier":{"PortValue":39912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383576,"nanos":609491801},"http":{"id":"cd9f3176-e516-4339-8547-c54a1e836cf0","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/sub-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd9f3176-e516-4339-8547-c54a1e836cf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41598","PortSpecifier":{"PortValue":41598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4e6d128-d314-401f-a305-ed822cbd839d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41598","PortSpecifier":{"PortValue":41598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383576,"nanos":653085232},"http":{"id":"c4e6d128-d314-401f-a305-ed822cbd839d","method":"GET","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DE5m3N8bVmPZNo7p_MT1I4s7N5ZPRjk6ztpZxPZdO1bDtIODX3iSb8QkQpxy"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DE5m3N8bVmPZNo7p_MT1I4s7N5ZPRjk6ztpZxPZdO1bDtIODX3iSb8QkQpxy\"}"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ce7270a-69d1-482c-9faa-0c15254a21ef","keyName":"e2e-sub-iso-4909c2","subscription":"e2e-a-only-1a4795","tenant":"e2e-shared-a-aedad1","userId":"0ce7270a-69d1-482c-9faa-0c15254a21ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/sub-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-1a4795"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4e6d128-d314-401f-a305-ed822cbd839d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39928","PortSpecifier":{"PortValue":39928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39928","PortSpecifier":{"PortValue":39928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383576,"nanos":698510334},"http":{"id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","method":"GET","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Vsg1yhQ2qQhuXgG_Dopx6UrFSTMtLzbdFuHfrCGIFcZhVfCKs04kDNgohdT"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Vsg1yhQ2qQhuXgG_Dopx6UrFSTMtLzbdFuHfrCGIFcZhVfCKs04kDNgohdT\"}"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"338268cb-42ae-46f0-a409-f4c1be4f5b46","keyName":"e2e-sub-iso-b70510","subscription":"e2e-b-only-1a4795","tenant":"e2e-shared-b-72fa7c","userId":"338268cb-42ae-46f0-a409-f4c1be4f5b46","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/sub-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-1a4795"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:19:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3d8af6e-fb86-4328-9a7c-4a13344277da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45194","PortSpecifier":{"PortValue":45194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45194","PortSpecifier":{"PortValue":45194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383595,"nanos":525679398},"http":{"id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/sub-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bc4ad62-264e-421d-94d6-2ffd381e020f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43570","PortSpecifier":{"PortValue":43570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e6e9827-5f71-43b7-a332-04850a9c7585","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43570","PortSpecifier":{"PortValue":43570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383595,"nanos":563853561},"http":{"id":"2e6e9827-5f71-43b7-a332-04850a9c7585","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/sub-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e6e9827-5f71-43b7-a332-04850a9c7585","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45210","PortSpecifier":{"PortValue":45210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45210","PortSpecifier":{"PortValue":45210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383595,"nanos":601382031},"http":{"id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T3OgbhMwzG58yBE_t5i2MxguAYiFsMB0tPH6mnqtn8FrHGp8owDpDTyJBb6"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T3OgbhMwzG58yBE_t5i2MxguAYiFsMB0tPH6mnqtn8FrHGp8owDpDTyJBb6\"}"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d45fcd62-92b8-45be-b6c9-9d457e8b5463","keyName":"e2e-sub-iso-4f78c9","subscription":"e2e-shared-sub-af5b85","tenant":"e2e-shared-a-aedad1","userId":"d45fcd62-92b8-45be-b6c9-9d457e8b5463","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/sub-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-af5b85"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b62ac0-a87c-45c6-a4fe-da25b5c15dd1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43586","PortSpecifier":{"PortValue":43586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2868c70d-6f77-42d6-a724-b39dc0353794","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43586","PortSpecifier":{"PortValue":43586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383595,"nanos":633155709},"http":{"id":"2868c70d-6f77-42d6-a724-b39dc0353794","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XUuwqfl8uZm7fPMk_cSWJqpY82vKvBhIuFqpcIZgfiVczWTnx2Iv3xKXIsn3"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XUuwqfl8uZm7fPMk_cSWJqpY82vKvBhIuFqpcIZgfiVczWTnx2Iv3xKXIsn3\"}"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"686cf853-26f1-4283-a7e6-06d616236ce2","keyName":"e2e-sub-iso-e09de0","subscription":"e2e-shared-sub-af5b85","tenant":"e2e-shared-b-72fa7c","userId":"686cf853-26f1-4283-a7e6-06d616236ce2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/sub-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-af5b85"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:19:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2868c70d-6f77-42d6-a724-b39dc0353794","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8"}
{"level":"error","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69"}
{"level":"error","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39965ffd937e87e9ec738384e9e5929a30c1d1f60cdf27c032c3975e147db894"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ce582c99c3fd6161954130bf4b49f951b741751fc315aa29bcb7e4d3b13f123"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aeecb0df9e7def6cfc6fde578d695647e17f5d632df09d616e44cdf64b90a26"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b30a24a365e8d90cccfa629ff0474377cf1af1a7708ba1ab9222d562a2b86e8c"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9580a5a6ece1af0ac45f0afd8aa4e3594f5d40e27f254a108b1b39a90168951"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/680068d0c62d141c154c568c8a8bbb1d0c13b15b31da0039ef19cf2c09e8769a"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9742c6ff73f55677314c5a9c65c4baf06d6a359e8b0167e8844fe9fac99718e9"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dacc5a31a458a11c4ef89982877699260aee02c9b5f18b7ec3e23d1f802c898b"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe90a1a04deb6aa1e54b418986ae7909c61c8bd175962892e1908450ddb39708"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e66eb5f1b6868ac7ea25583b10d2deb9201bb01103260d0a3c4cfdeb1d02c705"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b56bedfeae438dcc27bc2e3fe4ad675d2d98c97bee5bcfdeb59433d4bd95644"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/465133655ba7752fbe2fbdba26d24bf14b48663240c0a6f277bc33eb3adfa1f5"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb739009259a994fb2efa7178f3c73bd21ea5ae035a434802e7662b7b7723f2f"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaafd9bfcf02f153d40e125004bbd70ef6907e9f722efcbfc30649849ee5eee5"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ae340b641bbedfeb997898654b244d472e3e6884364701e3f8cfe429c138973"}
{"level":"info","ts":"2026-07-07T00:20:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17de3265c7a71588067916d6903bd2b17096187674462a4d470d198de71969a7"}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08"}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08"}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08"}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08"}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"}
{"level":"debug","ts":"2026-07-07T00:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06"}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09"}
{"level":"info","ts":"2026-07-07T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"}
{"level":"debug","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"debug","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"debug","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"debug","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"}
{"level":"error","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"debug","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53326","PortSpecifier":{"PortValue":53326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53326","PortSpecifier":{"PortValue":53326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383651,"nanos":98818103},"http":{"id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e7f403b-dada-450e-9f71-b4c8bc050e2a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60376","PortSpecifier":{"PortValue":60376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60376","PortSpecifier":{"PortValue":60376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383651,"nanos":164686337},"http":{"id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/rate-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d959b28-a03c-4f13-8f4a-16cfce51837e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53330","PortSpecifier":{"PortValue":53330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","method":"POST","path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53330","PortSpecifier":{"PortValue":53330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383651,"nanos":202752839},"http":{"id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ1NnuKxGKZmdEzM_FNBpGFR9aloxuVr9SQdEf0dlLpWgvb8q2HLnRyaDfp"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ1NnuKxGKZmdEzM_FNBpGFR9aloxuVr9SQdEf0dlLpWgvb8q2HLnRyaDfp\"}"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"685cd749-d05e-4621-8b3a-5fab8c6213ef","keyName":"e2e-rate-a-910c94","subscription":"e2e-rate-iso-a-910c94","tenant":"e2e-shared-a-aedad1","userId":"685cd749-d05e-4621-8b3a-5fab8c6213ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\",\"requestedSubscription\":\"e2e-rate-iso-a-910c94\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-910c94","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-910c94"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"685cd749-d05e-4621-8b3a-5fab8c6213ef","keyName":"e2e-rate-a-910c94","selected_subscription":"e2e-rate-iso-a-910c94","selected_subscription_key":"ai-tenant-e2e-shared-a-aedad1/e2e-rate-iso-a-910c94@ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-910c94","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdc7f813-88bc-4d38-bf96-3156fad956e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53340","PortSpecifier":{"PortValue":53340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5eabc2c2-153f-4414-94a4-a935b485a237","method":"POST","path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53340","PortSpecifier":{"PortValue":53340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383652,"nanos":261213529},"http":{"id":"5eabc2c2-153f-4414-94a4-a935b485a237","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ1NnuKxGKZmdEzM_FNBpGFR9aloxuVr9SQdEf0dlLpWgvb8q2HLnRyaDfp"}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ1NnuKxGKZmdEzM_FNBpGFR9aloxuVr9SQdEf0dlLpWgvb8q2HLnRyaDfp\"}"}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"685cd749-d05e-4621-8b3a-5fab8c6213ef","keyName":"e2e-rate-a-910c94","subscription":"e2e-rate-iso-a-910c94","tenant":"e2e-shared-a-aedad1","userId":"685cd749-d05e-4621-8b3a-5fab8c6213ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\",\"requestedSubscription\":\"e2e-rate-iso-a-910c94\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-910c94","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-910c94"}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"685cd749-d05e-4621-8b3a-5fab8c6213ef","keyName":"e2e-rate-a-910c94","selected_subscription":"e2e-rate-iso-a-910c94","selected_subscription_key":"ai-tenant-e2e-shared-a-aedad1/e2e-rate-iso-a-910c94@ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-910c94","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:20:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5eabc2c2-153f-4414-94a4-a935b485a237","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53352","PortSpecifier":{"PortValue":53352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"746fc5de-ef68-4925-91c8-5bf01d13c751","method":"POST","path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53352","PortSpecifier":{"PortValue":53352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383653,"nanos":303994288},"http":{"id":"746fc5de-ef68-4925-91c8-5bf01d13c751","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ1NnuKxGKZmdEzM_FNBpGFR9aloxuVr9SQdEf0dlLpWgvb8q2HLnRyaDfp"}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ1NnuKxGKZmdEzM_FNBpGFR9aloxuVr9SQdEf0dlLpWgvb8q2HLnRyaDfp\"}"}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"685cd749-d05e-4621-8b3a-5fab8c6213ef","keyName":"e2e-rate-a-910c94","subscription":"e2e-rate-iso-a-910c94","tenant":"e2e-shared-a-aedad1","userId":"685cd749-d05e-4621-8b3a-5fab8c6213ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\",\"requestedSubscription\":\"e2e-rate-iso-a-910c94\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-910c94","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-910c94"}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"685cd749-d05e-4621-8b3a-5fab8c6213ef","keyName":"e2e-rate-a-910c94","selected_subscription":"e2e-rate-iso-a-910c94","selected_subscription_key":"ai-tenant-e2e-shared-a-aedad1/e2e-rate-iso-a-910c94@ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-910c94","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:20:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"746fc5de-ef68-4925-91c8-5bf01d13c751","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60002","PortSpecifier":{"PortValue":60002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60002","PortSpecifier":{"PortValue":60002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383666,"nanos":372205445},"http":{"id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b5f1734-38b9-4025-9ed4-9569086fcb9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34334","PortSpecifier":{"PortValue":34334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb37d017-cb25-495c-80df-c7b7239b781b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34334","PortSpecifier":{"PortValue":34334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383666,"nanos":412917770},"http":{"id":"fb37d017-cb25-495c-80df-c7b7239b781b","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"313e0dcb-e533-4237-8649-7396bdec79cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"]}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c12277492f39"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4523e4cd-ed70-406a-a312-b55488c653c8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"313e0dcb-e533-4237-8649-7396bdec79cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/rate-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb37d017-cb25-495c-80df-c7b7239b781b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60016","PortSpecifier":{"PortValue":60016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","method":"POST","path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60016","PortSpecifier":{"PortValue":60016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383666,"nanos":451537597},"http":{"id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNHzPeCK3o82GMcF_uMiCvxEoz042QITBzmj25KHpkWMp22XyesbCyXHQFok"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNHzPeCK3o82GMcF_uMiCvxEoz042QITBzmj25KHpkWMp22XyesbCyXHQFok\"}"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3f12a4e2-c8b7-42e3-9ba4-f91ed8caa595","keyName":"e2e-rate-a-fec070","subscription":"e2e-rate-iso-a-fec070","tenant":"e2e-shared-a-aedad1","userId":"3f12a4e2-c8b7-42e3-9ba4-f91ed8caa595","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\",\"requestedSubscription\":\"e2e-rate-iso-a-fec070\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fec070","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fec070"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3f12a4e2-c8b7-42e3-9ba4-f91ed8caa595","keyName":"e2e-rate-a-fec070","selected_subscription":"e2e-rate-iso-a-fec070","selected_subscription_key":"ai-tenant-e2e-shared-a-aedad1/e2e-rate-iso-a-fec070@ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fec070","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ed636bf-7f24-4e85-bd28-e4b12821eb0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60022","PortSpecifier":{"PortValue":60022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","method":"POST","path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60022","PortSpecifier":{"PortValue":60022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383667,"nanos":494921940},"http":{"id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNHzPeCK3o82GMcF_uMiCvxEoz042QITBzmj25KHpkWMp22XyesbCyXHQFok"}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNHzPeCK3o82GMcF_uMiCvxEoz042QITBzmj25KHpkWMp22XyesbCyXHQFok\"}"}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3f12a4e2-c8b7-42e3-9ba4-f91ed8caa595","keyName":"e2e-rate-a-fec070","subscription":"e2e-rate-iso-a-fec070","tenant":"e2e-shared-a-aedad1","userId":"3f12a4e2-c8b7-42e3-9ba4-f91ed8caa595","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\",\"requestedSubscription\":\"e2e-rate-iso-a-fec070\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fec070","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fec070"}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3f12a4e2-c8b7-42e3-9ba4-f91ed8caa595","keyName":"e2e-rate-a-fec070","selected_subscription":"e2e-rate-iso-a-fec070","selected_subscription_key":"ai-tenant-e2e-shared-a-aedad1/e2e-rate-iso-a-fec070@ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fec070","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca72f8e-d4a7-4283-afc8-5221c5d639f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60034","PortSpecifier":{"PortValue":60034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e016508-4875-4177-8ec7-2a73d28823bb","method":"POST","path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions","host":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60034","PortSpecifier":{"PortValue":60034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383668,"nanos":533813379},"http":{"id":"6e016508-4875-4177-8ec7-2a73d28823bb","method":"POST","headers":{":authority":"e2e-shared-a-aedad1.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNHzPeCK3o82GMcF_uMiCvxEoz042QITBzmj25KHpkWMp22XyesbCyXHQFok"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNHzPeCK3o82GMcF_uMiCvxEoz042QITBzmj25KHpkWMp22XyesbCyXHQFok\"}"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3f12a4e2-c8b7-42e3-9ba4-f91ed8caa595","keyName":"e2e-rate-a-fec070","subscription":"e2e-rate-iso-a-fec070","tenant":"e2e-shared-a-aedad1","userId":"3f12a4e2-c8b7-42e3-9ba4-f91ed8caa595","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\",\"requestedSubscription\":\"e2e-rate-iso-a-fec070\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aedad1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fec070","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fec070"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3f12a4e2-c8b7-42e3-9ba4-f91ed8caa595","keyName":"e2e-rate-a-fec070","selected_subscription":"e2e-rate-iso-a-fec070","selected_subscription_key":"ai-tenant-e2e-shared-a-aedad1/e2e-rate-iso-a-fec070@ai-tenant-e2e-shared-a-aedad1/rate-test-model-aedad1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aedad1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fec070","namespace":"ai-tenant-e2e-shared-a-aedad1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e016508-4875-4177-8ec7-2a73d28823bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34346","PortSpecifier":{"PortValue":34346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","method":"POST","path":"/ai-tenant-e2e-shared-b-72fa7c/rate-test-model-72fa7c/v1/completions","host":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34346","PortSpecifier":{"PortValue":34346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383668,"nanos":572941064},"http":{"id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","method":"POST","headers":{":authority":"e2e-shared-b-72fa7c.apps.11e1847f-ac80-444e-a3b8-c12277492f39.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-72fa7c/rate-test-model-72fa7c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-S5r3vhk7Kd7LvY9W_BLM9R8nrex1xtnXkyBIL11W7TTMlxQTUmUOYh5SV0eE"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-S5r3vhk7Kd7LvY9W_BLM9R8nrex1xtnXkyBIL11W7TTMlxQTUmUOYh5SV0eE\"}"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73e91ab8-1352-4200-8789-3767c3dad9f3","keyName":"e2e-rate-b-fec070","subscription":"e2e-rate-iso-b-fec070","tenant":"e2e-shared-b-72fa7c","userId":"73e91ab8-1352-4200-8789-3767c3dad9f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-72fa7c/rate-test-model-72fa7c\",\"requestedSubscription\":\"e2e-rate-iso-b-fec070\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-72fa7c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72fa7c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fec070","namespace":"ai-tenant-e2e-shared-b-72fa7c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-72fa7c/rate-test-model-72fa7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-fec070"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"73e91ab8-1352-4200-8789-3767c3dad9f3","keyName":"e2e-rate-b-fec070","selected_subscription":"e2e-rate-iso-b-fec070","selected_subscription_key":"ai-tenant-e2e-shared-b-72fa7c/e2e-rate-iso-b-fec070@ai-tenant-e2e-shared-b-72fa7c/rate-test-model-72fa7c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72fa7c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fec070","namespace":"ai-tenant-e2e-shared-b-72fa7c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ca8fb96-b2c0-4d9c-a258-1ffd75900eed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/010cbf39c5ac7636e69494b7a7b29da82e47dea91359dd60c590059cce86deb3"}
{"level":"info","ts":"2026-07-07T00:21:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57f98cbf0ceb7fb03e5912530e54acbbb864c9ebeedb1a9ffc0f6837bb58385b"}
{"level":"info","ts":"2026-07-07T00:21:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be62f51b2f53975e67dc4465a992b8c4dba11f08533810a620c2917363958320"}
{"level":"info","ts":"2026-07-07T00:21:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01e358c58ece4079ff224c1d92373ff1b73faadd67dd0e99b7fb18accea09d09"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b591c358df0ddc7da3550cc42064d0fd5a80f22bd8a230e75bfbda3618df14f"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82dc62fa62ebae43283dfcf8737d8aa18107b48bbe281933ae8f9a3c72456705"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/200168676ec7e18a444ec323563bce78dbe00811d95d5816eccb111a47596c08"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9fbeb49f660b12ee48e5cd2076c084c2b97bbb93bf745cde571214b26ddcfcd"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e29d98d1e9f24ef25099425f2147e5768ea34697cf5e05934e1ee134cf46aadd"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f470d27789d9be3827dc0b957f4f1fcfd46f817c64eb756632a1f6add3fd9de8"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d14e40c3e15e3d95003514b42524519c13c6e46f5907b654f252b9eab39344b"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30c995b4f713cb781abf497a00e6f7267be3ccd800019c476eaf18bd95e8dc06"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a7689cdf7cca192c81d0e6ea73772a1c89d09d10dacc5e60cb3a5fe31bb1e69"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a52686487ed1a1cf06d1a6d1200b5da84eda8d1a197c8869b5d98dd2e57393c"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ebd3a17bad34886733897d152a88cd07b7e309e8c1e1455e2a4642ab72d15c"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38bec08e1289eadd3d54109c3d5fd5f0203091cc0aea046c20b0e940324f105f"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac73535f65e60257988a8ba2f6f7cf09ef72a42a1be3e98cf254d7dfafdc150b"}
{"level":"info","ts":"2026-07-07T00:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aabe96b363ff24991fee1cc42de51747aeccbadf70bdb6431b488537ae2f27db"}
{"level":"info","ts":"2026-07-07T00:21:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fe1f434f05977b9069c894b219406d652b8e592198961bdb4633860cf841b70"}
{"level":"info","ts":"2026-07-07T00:21:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c25570aeb0c8cae3190f5e831351716f755baa0e6b771c9d723e799b45dea804"}