{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2"}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333"}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2"}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333"}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0"}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2"}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333"}
{"level":"info","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2"}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0"}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c"}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c"}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04"}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff"}
{"level":"info","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40388","PortSpecifier":{"PortValue":40388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc5891ee-e892-4503-9abc-d45e7243a93f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-324a29.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40388","PortSpecifier":{"PortValue":40388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386566,"nanos":932817454},"http":{"id":"dc5891ee-e892-4503-9abc-d45e7243a93f","method":"POST","headers":{":authority":"e2e-shared-a-324a29.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3705e2cd-5cf6-493f-996b-1962efbcd57d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b56fb36f-244f-44ef-80de-320e884c84c9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5071a7306d2b"]}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5071a7306d2b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b56fb36f-244f-44ef-80de-320e884c84c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3705e2cd-5cf6-493f-996b-1962efbcd57d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e6969ee77a8e6bd694cef7e2162ea1d8183d259867f6f90c222962aace69027c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-324a29.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc5891ee-e892-4503-9abc-d45e7243a93f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59490","PortSpecifier":{"PortValue":59490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"316bfe82-eba8-4eff-b9bf-6809a3412459","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-64af9f.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59490","PortSpecifier":{"PortValue":59490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386566,"nanos":989092288},"http":{"id":"316bfe82-eba8-4eff-b9bf-6809a3412459","method":"POST","headers":{":authority":"e2e-shared-b-64af9f.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3705e2cd-5cf6-493f-996b-1962efbcd57d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b56fb36f-244f-44ef-80de-320e884c84c9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5071a7306d2b"]}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5071a7306d2b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b56fb36f-244f-44ef-80de-320e884c84c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3705e2cd-5cf6-493f-996b-1962efbcd57d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"91a1f8ccf9110d67454e97ec234ee5cf45362309353e1e5556523b11a07c0016"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-64af9f.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-64af9f/rate-test-model-64af9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-64af9f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"316bfe82-eba8-4eff-b9bf-6809a3412459","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c45ebe03-684e-4930-9795-40da51f9923c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40402","PortSpecifier":{"PortValue":40402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c45ebe03-684e-4930-9795-40da51f9923c","method":"POST","path":"/ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29/v1/completions","host":"e2e-shared-a-324a29.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c45ebe03-684e-4930-9795-40da51f9923c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40402","PortSpecifier":{"PortValue":40402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386567,"nanos":29777656},"http":{"id":"c45ebe03-684e-4930-9795-40da51f9923c","method":"POST","headers":{":authority":"e2e-shared-a-324a29.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qDXj15wxWlJLDjTg_k6wKxPHJoeTu5kPpF7tz4nCjhYESXf2B64IpS1DjorY"}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qDXj15wxWlJLDjTg_k6wKxPHJoeTu5kPpF7tz4nCjhYESXf2B64IpS1DjorY\"}"}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c581a490-9301-494b-b4f8-e2a36970c653","keyName":"e2e-rate-a-0c40ac","subscription":"e2e-rate-iso-a-0c40ac","tenant":"e2e-shared-a-324a29","userId":"c581a490-9301-494b-b4f8-e2a36970c653","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29\",\"requestedSubscription\":\"e2e-rate-iso-a-0c40ac\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m","name":"rate-test-model-324a29","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0c40ac","namespace":"ai-tenant-e2e-shared-a-324a29","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29"}}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c45ebe03-684e-4930-9795-40da51f9923c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0c40ac"}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c45ebe03-684e-4930-9795-40da51f9923c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c581a490-9301-494b-b4f8-e2a36970c653","keyName":"e2e-rate-a-0c40ac","selected_subscription":"e2e-rate-iso-a-0c40ac","selected_subscription_key":"ai-tenant-e2e-shared-a-324a29/e2e-rate-iso-a-0c40ac@ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m","name":"rate-test-model-324a29","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0c40ac","namespace":"ai-tenant-e2e-shared-a-324a29","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c45ebe03-684e-4930-9795-40da51f9923c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:42:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c45ebe03-684e-4930-9795-40da51f9923c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40404","PortSpecifier":{"PortValue":40404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","method":"POST","path":"/ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29/v1/completions","host":"e2e-shared-a-324a29.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40404","PortSpecifier":{"PortValue":40404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386568,"nanos":69144846},"http":{"id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","method":"POST","headers":{":authority":"e2e-shared-a-324a29.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qDXj15wxWlJLDjTg_k6wKxPHJoeTu5kPpF7tz4nCjhYESXf2B64IpS1DjorY"}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qDXj15wxWlJLDjTg_k6wKxPHJoeTu5kPpF7tz4nCjhYESXf2B64IpS1DjorY\"}"}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c581a490-9301-494b-b4f8-e2a36970c653","keyName":"e2e-rate-a-0c40ac","subscription":"e2e-rate-iso-a-0c40ac","tenant":"e2e-shared-a-324a29","userId":"c581a490-9301-494b-b4f8-e2a36970c653","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29\",\"requestedSubscription\":\"e2e-rate-iso-a-0c40ac\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m","name":"rate-test-model-324a29","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0c40ac","namespace":"ai-tenant-e2e-shared-a-324a29","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29"}}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0c40ac"}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c581a490-9301-494b-b4f8-e2a36970c653","keyName":"e2e-rate-a-0c40ac","selected_subscription":"e2e-rate-iso-a-0c40ac","selected_subscription_key":"ai-tenant-e2e-shared-a-324a29/e2e-rate-iso-a-0c40ac@ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m","name":"rate-test-model-324a29","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0c40ac","namespace":"ai-tenant-e2e-shared-a-324a29","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:42:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2f85378-35c2-4152-9290-d2a48dfbe1e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40420","PortSpecifier":{"PortValue":40420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","method":"POST","path":"/ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29/v1/completions","host":"e2e-shared-a-324a29.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40420","PortSpecifier":{"PortValue":40420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386569,"nanos":111912374},"http":{"id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","method":"POST","headers":{":authority":"e2e-shared-a-324a29.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qDXj15wxWlJLDjTg_k6wKxPHJoeTu5kPpF7tz4nCjhYESXf2B64IpS1DjorY"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qDXj15wxWlJLDjTg_k6wKxPHJoeTu5kPpF7tz4nCjhYESXf2B64IpS1DjorY\"}"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c581a490-9301-494b-b4f8-e2a36970c653","keyName":"e2e-rate-a-0c40ac","subscription":"e2e-rate-iso-a-0c40ac","tenant":"e2e-shared-a-324a29","userId":"c581a490-9301-494b-b4f8-e2a36970c653","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29\",\"requestedSubscription\":\"e2e-rate-iso-a-0c40ac\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-324a29.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m","name":"rate-test-model-324a29","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0c40ac","namespace":"ai-tenant-e2e-shared-a-324a29","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29"}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0c40ac"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c581a490-9301-494b-b4f8-e2a36970c653","keyName":"e2e-rate-a-0c40ac","selected_subscription":"e2e-rate-iso-a-0c40ac","selected_subscription_key":"ai-tenant-e2e-shared-a-324a29/e2e-rate-iso-a-0c40ac@ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-324a29/models/facebook/opt-125m","name":"rate-test-model-324a29","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0c40ac","namespace":"ai-tenant-e2e-shared-a-324a29","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-324a29/rate-test-model-324a29"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b40fe67-bbc7-4a96-bb33-284af683b31d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59500","PortSpecifier":{"PortValue":59500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"711e04a5-a624-4396-8c0a-17934798a8f3","method":"POST","path":"/ai-tenant-e2e-shared-b-64af9f/rate-test-model-64af9f/v1/completions","host":"e2e-shared-b-64af9f.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59500","PortSpecifier":{"PortValue":59500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386569,"nanos":148519185},"http":{"id":"711e04a5-a624-4396-8c0a-17934798a8f3","method":"POST","headers":{":authority":"e2e-shared-b-64af9f.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-64af9f/rate-test-model-64af9f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ro0KyzUhnGjvcAIJ_aMFoXHGnnxoxlGhWfjUfSf1nECZyFQcBFxmtV1vDdCu"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-64af9f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ro0KyzUhnGjvcAIJ_aMFoXHGnnxoxlGhWfjUfSf1nECZyFQcBFxmtV1vDdCu\"}"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-64af9f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b7632a46-4aa3-400d-aeae-2816637d1d96","keyName":"e2e-rate-b-0c40ac","subscription":"e2e-rate-iso-b-0c40ac","tenant":"e2e-shared-b-64af9f","userId":"b7632a46-4aa3-400d-aeae-2816637d1d96","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-64af9f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-64af9f/rate-test-model-64af9f\",\"requestedSubscription\":\"e2e-rate-iso-b-0c40ac\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-64af9f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-64af9f/models/facebook/opt-125m","name":"rate-test-model-64af9f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0c40ac","namespace":"ai-tenant-e2e-shared-b-64af9f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-64af9f/rate-test-model-64af9f"}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-64af9f/rate-test-model-64af9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-64af9f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0c40ac"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b7632a46-4aa3-400d-aeae-2816637d1d96","keyName":"e2e-rate-b-0c40ac","selected_subscription":"e2e-rate-iso-b-0c40ac","selected_subscription_key":"ai-tenant-e2e-shared-b-64af9f/e2e-rate-iso-b-0c40ac@ai-tenant-e2e-shared-b-64af9f/rate-test-model-64af9f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-64af9f/models/facebook/opt-125m","name":"rate-test-model-64af9f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0c40ac","namespace":"ai-tenant-e2e-shared-b-64af9f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-64af9f/rate-test-model-64af9f"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:42:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"711e04a5-a624-4396-8c0a-17934798a8f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f6a0c11d226412018803bb74c006c0bb35d0b6f6d0d6bc8092db68028112a04"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b640c8941c5190cceb8516e9c3fb0daf7dd8ab60e9780906674e8996fae41bc0"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7adbded352608008acf0a400495d6882a7d2c9d44156d1db6d082f1eda6b663"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ff9b1b7fbcc08791d3efff13311fd3b5cf90387f01170861e6a91c829373e1"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c0943cc0289e0c74c1c851d3b31ec35341b2e6f0f4c07a169a1ee7f1c05d7ff"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3e833b1c108b7f77e134c0253d1c9f1fe6a551a3a4482069bd87ee62eaa9d07"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c37013ba5a509b27ae13e114415dfbf37d8c6b3a5830bfd3af7d4c371073d9d8"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7c8555645cdd42eb3c2fe70d53b04d37d60da87158ed0be5d50c4420ac8a36"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ca3d051495909e785e06dd77407dc15373684fbce9823e45228a6bac6c1a6df"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5685c850d4ad3900a1f38636164ac079b60c53f82e467def9b4d0f72593c723f"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c36763bc3eaa2f50e758934762d12d269583eb9ba9b67ff0ce7353f64f77be7f"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a133582d6eb1b28384f63aecbfe3c9928a0d59619213151511457490053511c2"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5d013090f2d297f6cd82fe109035ea9ea9ef7c5001230ea43deb6513df2914e"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/235fc2e8a184001c4a4c5352299037f059dfb536ded381c081e98a514036a3c0"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2796a781d1d1c58569face3538cc115ab12d60bc29eacbdc691535c1e65e2977"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/932df048ef3a22e32832eb82c3cdc8669a1c2ab7a03bb6a21d48b057c340ecfd"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e95855a63460daf31fe40b1bb3ff5d4861a2bec9ecd9bb8cbba84fb4882c333"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7ebcb3cb5c872ba8957303a740c388ee4347b8abd6a79a07f1a37a73b229c5c"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6969ee77a8e6bd694cef7e2162ea1d8183d259867f6f90c222962aace69027c"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec7fcdaa011c8b788ce65f8b6b7dd2a197b118310d760bb0d525708c94dc93f4"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f53c2c93d200cb7e8c4cab520542845e206fdf39447901c3abcffde0dcf0f2"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91a1f8ccf9110d67454e97ec234ee5cf45362309353e1e5556523b11a07c0016"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2d1015a7e523beb980083982de283f2608945f01feded04fe7de1d82d2b8058"}
{"level":"info","ts":"2026-07-30T04:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd1605601db033bfd48945dafb817110f5c69052386040040ec980a60b0ee1f9"}
{"level":"info","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51154","PortSpecifier":{"PortValue":51154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51154","PortSpecifier":{"PortValue":51154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386655,"nanos":136989410},"http":{"id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","method":"POST","headers":{":authority":"maas.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3705e2cd-5cf6-493f-996b-1962efbcd57d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b56fb36f-244f-44ef-80de-320e884c84c9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5071a7306d2b"]}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5071a7306d2b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b56fb36f-244f-44ef-80de-320e884c84c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3705e2cd-5cf6-493f-996b-1962efbcd57d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa3c6fff-1dff-464c-97a3-b82489ece2ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51168","PortSpecifier":{"PortValue":51168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51168","PortSpecifier":{"PortValue":51168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386655,"nanos":207374179},"http":{"id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","method":"POST","headers":{":authority":"maas.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Y2iIruVelfTNEHdR_9zeLc1IdAiA75hnGwlYogquvapdnQhcJyKF5AixkuuX"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Y2iIruVelfTNEHdR_9zeLc1IdAiA75hnGwlYogquvapdnQhcJyKF5AixkuuX\"}"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d8b7390-d522-4ffa-a8a3-8769cce578be","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"7d8b7390-d522-4ffa-a8a3-8769cce578be","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7d8b7390-d522-4ffa-a8a3-8769cce578be","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"296f9a4b-3d50-4ac5-9719-4a5c2ac4b2f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f"}
{"level":"error","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea38b692271a7ac490e5f28bc3e68bd41e9b75212edcb04bc18536265d46a097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea38b692271a7ac490e5f28bc3e68bd41e9b75212edcb04bc18536265d46a097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea38b692271a7ac490e5f28bc3e68bd41e9b75212edcb04bc18536265d46a097"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea38b692271a7ac490e5f28bc3e68bd41e9b75212edcb04bc18536265d46a097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea38b692271a7ac490e5f28bc3e68bd41e9b75212edcb04bc18536265d46a097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea38b692271a7ac490e5f28bc3e68bd41e9b75212edcb04bc18536265d46a097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea38b692271a7ac490e5f28bc3e68bd41e9b75212edcb04bc18536265d46a097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea38b692271a7ac490e5f28bc3e68bd41e9b75212edcb04bc18536265d46a097"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T04:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195"}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T04:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6"}
{"level":"info","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46374","PortSpecifier":{"PortValue":46374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-a1808a.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46374","PortSpecifier":{"PortValue":46374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386705,"nanos":222747225},"http":{"id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","method":"POST","headers":{":authority":"e2e-ipp-a-a1808a.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3705e2cd-5cf6-493f-996b-1962efbcd57d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b56fb36f-244f-44ef-80de-320e884c84c9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5071a7306d2b"]}}
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5071a7306d2b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b56fb36f-244f-44ef-80de-320e884c84c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3705e2cd-5cf6-493f-996b-1962efbcd57d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-a1808a.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-a1808a/ipp-route-a1808a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-a1808a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:45:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22f100e2-e28d-4b97-a2df-d2a08afc38d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:35310","PortSpecifier":{"PortValue":35310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32d53016-c7fe-4f11-bdac-a865428abb22","method":"POST","path":"/ai-tenant-e2e-ipp-a-a1808a/ipp-route-a1808a/v1/chat/completions","host":"e2e-ipp-a-a1808a.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:35310","PortSpecifier":{"PortValue":35310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785386707,"nanos":287722629},"http":{"id":"32d53016-c7fe-4f11-bdac-a865428abb22","method":"POST","headers":{":authority":"e2e-ipp-a-a1808a.apps.c07dc790-ba3a-4e05-b37c-5071a7306d2b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-a1808a/ipp-route-a1808a/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-otPhEHtQ6T2Tskrv_cNExgia4gXgjN27UvVPnrnBDsVK7P31fhMwMFLHIUnW"}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-a1808a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-otPhEHtQ6T2Tskrv_cNExgia4gXgjN27UvVPnrnBDsVK7P31fhMwMFLHIUnW\"}"}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-a1808a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f941745e-f2fa-45f2-a210-90068022161f","keyName":"e2e-ipp-a1808a","subscription":"ipp-route-a1808a-sub","tenant":"e2e-ipp-a-a1808a","userId":"f941745e-f2fa-45f2-a210-90068022161f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-a1808a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-a1808a/ipp-route-a1808a\",\"requestedSubscription\":\"ipp-route-a1808a-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-a1808a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-a1808a/models/facebook/opt-125m","name":"ipp-route-a1808a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-a1808a-sub","namespace":"ai-tenant-e2e-ipp-a-a1808a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-a1808a/ipp-route-a1808a"}}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-a1808a/ipp-route-a1808a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-a1808a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-a1808a-sub"}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f941745e-f2fa-45f2-a210-90068022161f","keyName":"e2e-ipp-a1808a","selected_subscription":"ipp-route-a1808a-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-a1808a/ipp-route-a1808a-sub@ai-tenant-e2e-ipp-a-a1808a/ipp-route-a1808a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-a1808a/models/facebook/opt-125m","name":"ipp-route-a1808a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-a1808a-sub","namespace":"ai-tenant-e2e-ipp-a-a1808a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-a1808a/ipp-route-a1808a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T04:45:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32d53016-c7fe-4f11-bdac-a865428abb22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea38b692271a7ac490e5f28bc3e68bd41e9b75212edcb04bc18536265d46a097"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efedd6b8050cdaf21386226cf40611d4a035a6c7ddedd05edae141f8e935efe6"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/532198a1c1f4239b83c6548e8729f9126476640b1666f9e6d736694a96f6b195"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24bda76d17d2a77c37fa32ae2d49609dceaaa96033a827019470a851a69589d0"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/131aef309c9fad6064ae709d33382be9b3782c9f85441787dcacde53de8830a6"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac145525723cc0817f5edd5df44b0f50a2dd3b8d77cc240804c21ab858caff95"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38646c3b6f0443238396e4433ec03fcfbf4c6acc06033e1a9f801cef89be6519"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0d1b9c89642b14146637fe56d362ed2f76f27597b314027fd8f64018be6dc9f"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc01993774367abb933c2473308d94cb3767a927e5a40bbee2c3d54fc1fa6f1"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5002c8202326c79c01c41a07dc2a7f66939256373f8e91e57be2cd9fb566f4bd"}
{"level":"info","ts":"2026-07-30T04:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1459ba2cb34a68e85d947de23810248be0c25cac2bec4dc746e4da140e52ffdd"}
{"level":"info","ts":"2026-07-30T04:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dd52cdbbd59f0fae45ce886603e056c878ef09b7e135b99b2bdd386c7b88f35"}