--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"}
{"level":"error","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027"}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9"}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027"}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"}
{"level":"info","ts":"2026-07-02T22:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9"}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f5d7bbf4f7da1e72386e9a47c8c7b84caaf5cf99819b8ba62f27d268995597","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f5d7bbf4f7da1e72386e9a47c8c7b84caaf5cf99819b8ba62f27d268995597","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5d7bbf4f7da1e72386e9a47c8c7b84caaf5cf99819b8ba62f27d268995597"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f5d7bbf4f7da1e72386e9a47c8c7b84caaf5cf99819b8ba62f27d268995597","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09f5d7bbf4f7da1e72386e9a47c8c7b84caaf5cf99819b8ba62f27d268995597"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f5d7bbf4f7da1e72386e9a47c8c7b84caaf5cf99819b8ba62f27d268995597","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5d7bbf4f7da1e72386e9a47c8c7b84caaf5cf99819b8ba62f27d268995597"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f5d7bbf4f7da1e72386e9a47c8c7b84caaf5cf99819b8ba62f27d268995597","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:11:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"}
{"level":"debug","ts":"2026-07-02T22:12:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a"}
{"level":"error","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2"}
{"level":"info","ts":"2026-07-02T22:12:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2"}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2"}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cca70d1f7db489cfde2c590dfd09ece8454c6937fcff0b327c8c0be1f141d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cca70d1f7db489cfde2c590dfd09ece8454c6937fcff0b327c8c0be1f141d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cca70d1f7db489cfde2c590dfd09ece8454c6937fcff0b327c8c0be1f141d01"}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cca70d1f7db489cfde2c590dfd09ece8454c6937fcff0b327c8c0be1f141d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cca70d1f7db489cfde2c590dfd09ece8454c6937fcff0b327c8c0be1f141d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cca70d1f7db489cfde2c590dfd09ece8454c6937fcff0b327c8c0be1f141d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09"}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cca70d1f7db489cfde2c590dfd09ece8454c6937fcff0b327c8c0be1f141d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cca70d1f7db489cfde2c590dfd09ece8454c6937fcff0b327c8c0be1f141d01"}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09"}
{"level":"info","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38920","PortSpecifier":{"PortValue":38920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38920","PortSpecifier":{"PortValue":38920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030323,"nanos":469626391},"http":{"id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3cdb16e-da7c-48b8-b095-dd4252fa8869","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43082947-cb55-4a17-904d-3638de16122d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43470","PortSpecifier":{"PortValue":43470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43082947-cb55-4a17-904d-3638de16122d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43082947-cb55-4a17-904d-3638de16122d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43470","PortSpecifier":{"PortValue":43470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030323,"nanos":535168969},"http":{"id":"43082947-cb55-4a17-904d-3638de16122d","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43082947-cb55-4a17-904d-3638de16122d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43082947-cb55-4a17-904d-3638de16122d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43082947-cb55-4a17-904d-3638de16122d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43082947-cb55-4a17-904d-3638de16122d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43082947-cb55-4a17-904d-3638de16122d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43082947-cb55-4a17-904d-3638de16122d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/auth-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43082947-cb55-4a17-904d-3638de16122d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43082947-cb55-4a17-904d-3638de16122d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43082947-cb55-4a17-904d-3638de16122d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43082947-cb55-4a17-904d-3638de16122d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43082947-cb55-4a17-904d-3638de16122d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38924","PortSpecifier":{"PortValue":38924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","method":"GET","path":"/maas-api/v1/api-keys/47a8157d-32a4-4d05-a8ab-d2c06b583230","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38924","PortSpecifier":{"PortValue":38924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030323,"nanos":627907896},"http":{"id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","method":"GET","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/47a8157d-32a4-4d05-a8ab-d2c06b583230",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/47a8157d-32a4-4d05-a8ab-d2c06b583230",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d1c0be0-2792-471d-929f-5cd50002bc6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43486","PortSpecifier":{"PortValue":43486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","method":"GET","path":"/maas-api/v1/api-keys/7be4ff44-bf19-4f55-8a29-d5e8c88aeee1","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43486","PortSpecifier":{"PortValue":43486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030323,"nanos":666018677},"http":{"id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","method":"GET","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7be4ff44-bf19-4f55-8a29-d5e8c88aeee1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7be4ff44-bf19-4f55-8a29-d5e8c88aeee1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/auth-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"043b27d9-b61c-4321-91c1-b026e64dfa9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:58680","PortSpecifier":{"PortValue":58680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:58680","PortSpecifier":{"PortValue":58680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030342,"nanos":893511197},"http":{"id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37045ab2-fa5a-4980-9edc-16f6db2ad0a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:56406","PortSpecifier":{"PortValue":56406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:56406","PortSpecifier":{"PortValue":56406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030342,"nanos":934912565},"http":{"id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/auth-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36451d1b-4665-40f1-819c-3a4d9e9ee2c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:58690","PortSpecifier":{"PortValue":58690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8427fb88-f6b7-456e-86f0-6253165daa80","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:58690","PortSpecifier":{"PortValue":58690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030342,"nanos":985056984},"http":{"id":"8427fb88-f6b7-456e-86f0-6253165daa80","method":"GET","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13cKDheBm5K1iDDto_McMxSmleInoPOEd7Zj5706UjIEDKZ8HgZKNDqz1MNG"}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13cKDheBm5K1iDDto_McMxSmleInoPOEd7Zj5706UjIEDKZ8HgZKNDqz1MNG\"}"}
{"level":"debug","ts":"2026-07-02T22:12:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"16afbe83-9cdc-4b7d-884c-0a5487eae34e","keyName":"e2e-auth-iso-a-5280ee","subscription":"e2e-auth-iso-8f17d1","tenant":"e2e-shared-a-edb549","userId":"16afbe83-9cdc-4b7d-884c-0a5487eae34e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8f17d1"}
{"level":"info","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8427fb88-f6b7-456e-86f0-6253165daa80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48968","PortSpecifier":{"PortValue":48968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cf842fe-2345-4c92-82da-a44c47c81c94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48968","PortSpecifier":{"PortValue":48968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030362,"nanos":249142559},"http":{"id":"8cf842fe-2345-4c92-82da-a44c47c81c94","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cf842fe-2345-4c92-82da-a44c47c81c94","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55818","PortSpecifier":{"PortValue":55818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55818","PortSpecifier":{"PortValue":55818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030362,"nanos":287244914},"http":{"id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/auth-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c4b6a4a-5fc1-4b8f-b971-ac86be4004c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55822","PortSpecifier":{"PortValue":55822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a149323e-6e35-4012-97cc-4c7a7380d351","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55822","PortSpecifier":{"PortValue":55822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030362,"nanos":322952127},"http":{"id":"a149323e-6e35-4012-97cc-4c7a7380d351","method":"GET","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HYecmtFZ8fItQ6i3_SAbMWcl9hGxj9lM6NUIw3CC6GyNZByJOuc7XHwSuNOy"}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HYecmtFZ8fItQ6i3_SAbMWcl9hGxj9lM6NUIw3CC6GyNZByJOuc7XHwSuNOy\"}"}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T22:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a149323e-6e35-4012-97cc-4c7a7380d351","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:35046","PortSpecifier":{"PortValue":35046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:35046","PortSpecifier":{"PortValue":35046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030379,"nanos":479989228},"http":{"id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6640cc4-3253-4a94-a1bb-dd5f94579b84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:59660","PortSpecifier":{"PortValue":59660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:59660","PortSpecifier":{"PortValue":59660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030379,"nanos":517110471},"http":{"id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/auth-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c2d0d4d-74e1-92f6-93e6-2a1846447906","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:35050","PortSpecifier":{"PortValue":35050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6aedd40c-e332-4f4b-ad14-80e249611e06","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:35050","PortSpecifier":{"PortValue":35050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030379,"nanos":559904693},"http":{"id":"6aedd40c-e332-4f4b-ad14-80e249611e06","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aedd40c-e332-4f4b-ad14-80e249611e06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:59666","PortSpecifier":{"PortValue":59666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:59666","PortSpecifier":{"PortValue":59666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030379,"nanos":595908647},"http":{"id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/auth-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:12:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ef71ff6-3076-410e-b6b4-fac210a1d4d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6878e24-87a7-472e-a837-37f84d32da64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:44978","PortSpecifier":{"PortValue":44978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6878e24-87a7-472e-a837-37f84d32da64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6878e24-87a7-472e-a837-37f84d32da64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:44978","PortSpecifier":{"PortValue":44978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030394,"nanos":643205942},"http":{"id":"e6878e24-87a7-472e-a837-37f84d32da64","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6878e24-87a7-472e-a837-37f84d32da64","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6878e24-87a7-472e-a837-37f84d32da64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6878e24-87a7-472e-a837-37f84d32da64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6878e24-87a7-472e-a837-37f84d32da64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6878e24-87a7-472e-a837-37f84d32da64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6878e24-87a7-472e-a837-37f84d32da64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6878e24-87a7-472e-a837-37f84d32da64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6878e24-87a7-472e-a837-37f84d32da64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6878e24-87a7-472e-a837-37f84d32da64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6878e24-87a7-472e-a837-37f84d32da64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6878e24-87a7-472e-a837-37f84d32da64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:52280","PortSpecifier":{"PortValue":52280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:52280","PortSpecifier":{"PortValue":52280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030394,"nanos":682008708},"http":{"id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/auth-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c815de48-2ca5-4777-9fb3-c7f025e703ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:52284","PortSpecifier":{"PortValue":52284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","method":"GET","path":"/maas-api/v1/api-keys/46920dd6-311e-496d-a12e-0ca7b9b45a3a","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:52284","PortSpecifier":{"PortValue":52284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030394,"nanos":716925273},"http":{"id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","method":"GET","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/46920dd6-311e-496d-a12e-0ca7b9b45a3a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/46920dd6-311e-496d-a12e-0ca7b9b45a3a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/auth-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db45600e-86ef-498d-8cc2-3ebae469bfb8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:44986","PortSpecifier":{"PortValue":44986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","method":"GET","path":"/maas-api/v1/api-keys/46920dd6-311e-496d-a12e-0ca7b9b45a3a","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:44986","PortSpecifier":{"PortValue":44986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030394,"nanos":749304797},"http":{"id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","method":"GET","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/46920dd6-311e-496d-a12e-0ca7b9b45a3a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/46920dd6-311e-496d-a12e-0ca7b9b45a3a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:13:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efcca593-ae8b-43e9-ad7a-7130eaaf8773","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:42962","PortSpecifier":{"PortValue":42962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"513b8079-aff9-4f6b-973f-f1a7546865db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:42962","PortSpecifier":{"PortValue":42962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030413,"nanos":960532075},"http":{"id":"513b8079-aff9-4f6b-973f-f1a7546865db","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"513b8079-aff9-4f6b-973f-f1a7546865db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:32986","PortSpecifier":{"PortValue":32986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27699a04-2243-4a81-91df-10b048f0fc4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:32986","PortSpecifier":{"PortValue":32986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030414,"nanos":16940},"http":{"id":"27699a04-2243-4a81-91df-10b048f0fc4a","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/auth-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27699a04-2243-4a81-91df-10b048f0fc4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9948bc44-2574-4c5c-808b-822377aea24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:42978","PortSpecifier":{"PortValue":42978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9948bc44-2574-4c5c-808b-822377aea24c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9948bc44-2574-4c5c-808b-822377aea24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:42978","PortSpecifier":{"PortValue":42978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030414,"nanos":49716046},"http":{"id":"9948bc44-2574-4c5c-808b-822377aea24c","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O3niLN6aiQFdFCW_r2SlERsnAKKl1UiPuUE3Z8FBw6Zk5VAwI6BkeUfOlGV"}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O3niLN6aiQFdFCW_r2SlERsnAKKl1UiPuUE3Z8FBw6Zk5VAwI6BkeUfOlGV\"}"}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da023989-29a1-4e7b-9c5f-2570c1594f1b","keyName":"e2e-auth-iso-a-72787a","subscription":"e2e-auth-iso-2e2908","tenant":"e2e-shared-a-edb549","userId":"da023989-29a1-4e7b-9c5f-2570c1594f1b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9948bc44-2574-4c5c-808b-822377aea24c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/auth-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-2e2908"}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9948bc44-2574-4c5c-808b-822377aea24c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9948bc44-2574-4c5c-808b-822377aea24c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:13:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9948bc44-2574-4c5c-808b-822377aea24c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e784a94508108553d40fbfeedef41250298dc4c21db377f4850226b6fd8a6c5"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d797b58dd0cc8badb4187565c3687491f0a5514bf5cef3a522bf2e4105aef6f"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c558e796130543d731b2125fdc0ce19ecc946fc355c02bfd7a39a934c9095c5e"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b04ae37312f2bd2fc61a6a3c489635385e6b069e07e75e339ef425f110c3cbcc"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cca70d1f7db489cfde2c590dfd09ece8454c6937fcff0b327c8c0be1f141d01"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09f5d7bbf4f7da1e72386e9a47c8c7b84caaf5cf99819b8ba62f27d268995597"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17afdd6619d7dbcf0c4920963f82260b2e9b020ccacd054401b7b055e619d6e2"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5224f324e8606ffe4fd7e708f6c09222892c6e51604cfd5fa9955cafc2e42027"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43e74b84d42160d9dfa2dd0f1632504fc33206afe38166701bb263704797b7a4"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/183a5105b4f40498796d3e3be1b3d7eb4255a340896aefd82d4e9d25f0094125"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/886269a1cc2d44f886fcde7c933316915557887fe9363a1a831cbb31a4b33503"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2c4db7cc8188b359a3a3c83d0fe1af61d656213d714956fec3ac5a74792a72c"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d258a1c43bc3e3fba127bb5249dda063dc7b904bc23162a5b8149f14a9e7f09"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7bb0702f43ea9191d42eb3c7772506bfab82ecaaa75a18754bff99fcb157fab"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bbc1eb5e4596dd3e3a1aa7ebc809f235f921bf549055006e667d1065cd4595a"}
{"level":"info","ts":"2026-07-02T22:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07d6d55ae4af262ca2e2a03be0af3956d485d22ce5e48dc458b73c70c7102c25"}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7"}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7"}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6"}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6"}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5"}
{"level":"info","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063"}
{"level":"info","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"}
{"level":"info","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:13:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:13:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"debug","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:13:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:13:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5"}
{"level":"info","ts":"2026-07-02T22:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"debug","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"info","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"error","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c"}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c"}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c"}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a"}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a"}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"}
{"level":"debug","ts":"2026-07-02T22:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"}
{"level":"error","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"error","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"debug","ts":"2026-07-02T22:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a"}
{"level":"info","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5"}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"error","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"error","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6"}
{"level":"debug","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189"}
{"level":"info","ts":"2026-07-02T22:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"info","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"946cbd09-0edf-4363-8d65-39619c75bb17","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030482,"nanos":851060294},"http":{"id":"946cbd09-0edf-4363-8d65-39619c75bb17","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/sub-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"946cbd09-0edf-4363-8d65-39619c75bb17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030482,"nanos":898544349},"http":{"id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/sub-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caffea74-6f94-4e28-8f9d-a8ed0d8b1315","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33044","PortSpecifier":{"PortValue":33044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33044","PortSpecifier":{"PortValue":33044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030482,"nanos":938729337},"http":{"id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","method":"GET","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FT9VPkIWD429iXk3_2UTDjebI987n4gHTg6QpHuZyXLWaP5mwWVK0dWiJ2Vb"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FT9VPkIWD429iXk3_2UTDjebI987n4gHTg6QpHuZyXLWaP5mwWVK0dWiJ2Vb\"}"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b9b2e16-e56d-40e7-9852-b065ae57b0be","keyName":"e2e-sub-iso-3b1947","subscription":"e2e-a-only-6719b4","tenant":"e2e-shared-a-edb549","userId":"1b9b2e16-e56d-40e7-9852-b065ae57b0be","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/sub-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-6719b4"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e6b0080-26fa-4b81-b9aa-0f3ef50afc68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48852","PortSpecifier":{"PortValue":48852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48852","PortSpecifier":{"PortValue":48852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030482,"nanos":980051348},"http":{"id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","method":"GET","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O08Vsav4XArrtj9J_IrP6wtLw6MItQeKgSXZUQgPW8d6fgkeeSL2xr46gxBS"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O08Vsav4XArrtj9J_IrP6wtLw6MItQeKgSXZUQgPW8d6fgkeeSL2xr46gxBS\"}"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d76fcc66-9278-4945-ba87-81df312897af","keyName":"e2e-sub-iso-9c2c3e","subscription":"e2e-b-only-6719b4","tenant":"e2e-shared-b-f2a709","userId":"d76fcc66-9278-4945-ba87-81df312897af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/sub-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-6719b4"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75ae8a5-a4ad-4b23-841f-a0237b5a3e01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:39112","PortSpecifier":{"PortValue":39112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1d02c25-45b1-4aa1-9068-10b305379c25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:39112","PortSpecifier":{"PortValue":39112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030495,"nanos":229925267},"http":{"id":"c1d02c25-45b1-4aa1-9068-10b305379c25","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/sub-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1d02c25-45b1-4aa1-9068-10b305379c25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:60140","PortSpecifier":{"PortValue":60140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:60140","PortSpecifier":{"PortValue":60140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030495,"nanos":267672746},"http":{"id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/sub-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78c83f2e-686d-404f-8adb-a2ae09c096f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:39126","PortSpecifier":{"PortValue":39126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"712edd96-cfc5-4feb-9019-e41ed0652940","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:39126","PortSpecifier":{"PortValue":39126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030495,"nanos":304557662},"http":{"id":"712edd96-cfc5-4feb-9019-e41ed0652940","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10yFSIpyNIVKNqa1_nx0a3bZfCXhXDrcc8sjOJr4WiDlqZy10RrEBBFPJFaq"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10yFSIpyNIVKNqa1_nx0a3bZfCXhXDrcc8sjOJr4WiDlqZy10RrEBBFPJFaq\"}"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1c862e2e-fe57-4469-b135-365ab84989a9","keyName":"e2e-sub-iso-647a15","subscription":"e2e-shared-sub-0f1efb","tenant":"e2e-shared-a-edb549","userId":"1c862e2e-fe57-4469-b135-365ab84989a9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/sub-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0f1efb"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"712edd96-cfc5-4feb-9019-e41ed0652940","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:60152","PortSpecifier":{"PortValue":60152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:60152","PortSpecifier":{"PortValue":60152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030495,"nanos":335326629},"http":{"id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pjAHCZVqERWv7bqC_s3TTwHbcFAloObKpEIPyLTl1TNQOwNvbyHvzuRyxJOv"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pjAHCZVqERWv7bqC_s3TTwHbcFAloObKpEIPyLTl1TNQOwNvbyHvzuRyxJOv\"}"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4d821a31-fcd9-4268-8512-ab169779c73c","keyName":"e2e-sub-iso-6dbbde","subscription":"e2e-shared-sub-0f1efb","tenant":"e2e-shared-b-f2a709","userId":"4d821a31-fcd9-4268-8512-ab169779c73c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/sub-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0f1efb"}
{"level":"info","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"331a5642-59c6-4c5d-9e2d-a0c7b7112aca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"}
{"level":"info","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"}
{"level":"debug","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"}
{"level":"debug","ts":"2026-07-02T22:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440ebaf2b464ee2654c77e186e03eb0282a61968beb3cc46dd67f9a2dc1a0802"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440ebaf2b464ee2654c77e186e03eb0282a61968beb3cc46dd67f9a2dc1a0802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["440ebaf2b464ee2654c77e186e03eb0282a61968beb3cc46dd67f9a2dc1a0802"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440ebaf2b464ee2654c77e186e03eb0282a61968beb3cc46dd67f9a2dc1a0802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440ebaf2b464ee2654c77e186e03eb0282a61968beb3cc46dd67f9a2dc1a0802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440ebaf2b464ee2654c77e186e03eb0282a61968beb3cc46dd67f9a2dc1a0802"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bacbe621b2f41d717bd74ea735063b927e3142688d04b152875aaa5985949189"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11c8c55a0130330282e159ec0b9c3cc078fec7d34d7e1408127f673f9c98b0d6"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94a1eddda55ac8056893be9bf5cd51f4089100531f765998905f40e8f3a29718"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beec085e23bda0a129fc75ffd2b68c94de5d32eff0cb75c92ae6f7efc04f7ef3"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b0862c1def63b5c2a848280dcfbfdb48a23f444ed0c9453c47a6dce909891a"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40b9a9cdec84b1164410ddaf2f6d60fb6e8369954577ce83de12ec098cf11034"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0510b8f7492c7b30358300123555e36c91abaf10541861d862346e1a7537063"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c344025425b28193bf08db14d2f74e09fa6f83bc9dd9cdd6a086fb8b9ac46c74"}
{"level":"info","ts":"2026-07-02T22:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ea36e84f41351c6fbd061ba3f83553afd540ea5f39caffc71e40a9e6de68ce7"}
{"level":"info","ts":"2026-07-02T22:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a2743274fa311ba1953c20e51e4d2d75e4046bc5d338b95a8202d9e26bb5f9b"}
{"level":"info","ts":"2026-07-02T22:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9451749e328d57c6bf06317333e1ef162fb288ad4bf72a420f8ccfcf7adf32c"}
{"level":"info","ts":"2026-07-02T22:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/003329a5afc527422aac98ac06a04e0676144813a8c9d1f27831d0491e3eab83"}
{"level":"info","ts":"2026-07-02T22:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e604d069778d306f2adf3f1175ec0b2eeb1876e4c60e46aa4b3ba0dccf97b37"}
{"level":"info","ts":"2026-07-02T22:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89b609c707d994f39a060521b425da1a4d01c32fedc1d17ea5f65cc54c5c54c5"}
{"level":"info","ts":"2026-07-02T22:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7f32cd91c47783e9643947bb9a6edd64523581d87296e3d096bd5bf6fbe457b"}
{"level":"info","ts":"2026-07-02T22:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75799a59d465b99fcbcac6d4d33ebdcfa66284b29060086731e997ae01bb97f3"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a"}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"}
{"level":"info","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"}
{"level":"debug","ts":"2026-07-02T22:15:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec"}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec"}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec"}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01"}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec"}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01"}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"error","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:15:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941"}
{"level":"debug","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"debug","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"debug","ts":"2026-07-02T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"}
{"level":"error","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a"}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9"}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440ebaf2b464ee2654c77e186e03eb0282a61968beb3cc46dd67f9a2dc1a0802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T22:16:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440ebaf2b464ee2654c77e186e03eb0282a61968beb3cc46dd67f9a2dc1a0802"}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"}
{"level":"info","ts":"2026-07-02T22:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57028","PortSpecifier":{"PortValue":57028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57028","PortSpecifier":{"PortValue":57028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030565,"nanos":969553867},"http":{"id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebce6d51-7380-49f0-8fb6-803ed1d1de58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:37670","PortSpecifier":{"PortValue":37670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:37670","PortSpecifier":{"PortValue":37670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030566,"nanos":11824098},"http":{"id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/rate-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90b18125-ed8b-48d5-9fa9-6567ec94db16","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57042","PortSpecifier":{"PortValue":57042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57042","PortSpecifier":{"PortValue":57042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030566,"nanos":56073589},"http":{"id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QvsWmZsnzcWS3f6z_HFG8sqxDLNxs3rxXgsYPibUCl9iCWHxZLxYTd0tKdRU"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QvsWmZsnzcWS3f6z_HFG8sqxDLNxs3rxXgsYPibUCl9iCWHxZLxYTd0tKdRU\"}"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"99bfc719-2c60-4ccf-84cc-2b4b5bb2077a","keyName":"e2e-rate-a-8b6982","subscription":"e2e-rate-iso-a-8b6982","tenant":"e2e-shared-a-edb549","userId":"99bfc719-2c60-4ccf-84cc-2b4b5bb2077a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-8b6982\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b6982","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b6982"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"99bfc719-2c60-4ccf-84cc-2b4b5bb2077a","keyName":"e2e-rate-a-8b6982","selected_subscription":"e2e-rate-iso-a-8b6982","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-8b6982@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b6982","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6cd05d9-a5fd-4368-bd66-398c0b3b3faa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57048","PortSpecifier":{"PortValue":57048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccb13466-382b-4562-b416-c71b5fe85d7d","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57048","PortSpecifier":{"PortValue":57048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030567,"nanos":116343502},"http":{"id":"ccb13466-382b-4562-b416-c71b5fe85d7d","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QvsWmZsnzcWS3f6z_HFG8sqxDLNxs3rxXgsYPibUCl9iCWHxZLxYTd0tKdRU"}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QvsWmZsnzcWS3f6z_HFG8sqxDLNxs3rxXgsYPibUCl9iCWHxZLxYTd0tKdRU\"}"}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"99bfc719-2c60-4ccf-84cc-2b4b5bb2077a","keyName":"e2e-rate-a-8b6982","subscription":"e2e-rate-iso-a-8b6982","tenant":"e2e-shared-a-edb549","userId":"99bfc719-2c60-4ccf-84cc-2b4b5bb2077a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-8b6982\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b6982","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b6982"}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"99bfc719-2c60-4ccf-84cc-2b4b5bb2077a","keyName":"e2e-rate-a-8b6982","selected_subscription":"e2e-rate-iso-a-8b6982","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-8b6982@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b6982","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccb13466-382b-4562-b416-c71b5fe85d7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57060","PortSpecifier":{"PortValue":57060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57060","PortSpecifier":{"PortValue":57060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030568,"nanos":152741215},"http":{"id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QvsWmZsnzcWS3f6z_HFG8sqxDLNxs3rxXgsYPibUCl9iCWHxZLxYTd0tKdRU"}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QvsWmZsnzcWS3f6z_HFG8sqxDLNxs3rxXgsYPibUCl9iCWHxZLxYTd0tKdRU\"}"}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"99bfc719-2c60-4ccf-84cc-2b4b5bb2077a","keyName":"e2e-rate-a-8b6982","subscription":"e2e-rate-iso-a-8b6982","tenant":"e2e-shared-a-edb549","userId":"99bfc719-2c60-4ccf-84cc-2b4b5bb2077a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-8b6982\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b6982","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b6982"}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"99bfc719-2c60-4ccf-84cc-2b4b5bb2077a","keyName":"e2e-rate-a-8b6982","selected_subscription":"e2e-rate-iso-a-8b6982","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-8b6982@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b6982","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3bf2f43-a9c5-42ec-b5eb-a313b8802fe9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45398","PortSpecifier":{"PortValue":45398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45398","PortSpecifier":{"PortValue":45398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030576,"nanos":896164046},"http":{"id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c8ceb4d-7d68-4eab-9999-c67f103cae2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:37076","PortSpecifier":{"PortValue":37076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:37076","PortSpecifier":{"PortValue":37076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030576,"nanos":935903718},"http":{"id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"]}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2c01d5ceb55"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff05ebd7-1458-491e-a663-976ef93b73bf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40fbd0ca-e264-410b-a8bc-d27cd5b78520","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/rate-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff74bd34-2e76-4a14-a127-14d6eaf0a958","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45414","PortSpecifier":{"PortValue":45414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d70f86b-229d-44d6-830b-6557ff39fde3","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45414","PortSpecifier":{"PortValue":45414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030576,"nanos":976274557},"http":{"id":"7d70f86b-229d-44d6-830b-6557ff39fde3","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d70f86b-229d-44d6-830b-6557ff39fde3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aee7284-b001-4faa-ba22-056315276e05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45420","PortSpecifier":{"PortValue":45420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1aee7284-b001-4faa-ba22-056315276e05","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aee7284-b001-4faa-ba22-056315276e05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45420","PortSpecifier":{"PortValue":45420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030578,"nanos":16657454},"http":{"id":"1aee7284-b001-4faa-ba22-056315276e05","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1aee7284-b001-4faa-ba22-056315276e05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aee7284-b001-4faa-ba22-056315276e05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aee7284-b001-4faa-ba22-056315276e05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aee7284-b001-4faa-ba22-056315276e05","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33322","PortSpecifier":{"PortValue":33322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33322","PortSpecifier":{"PortValue":33322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030579,"nanos":52758204},"http":{"id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acdb2f7d-6482-4b0d-bf12-5c47147a4c79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33328","PortSpecifier":{"PortValue":33328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33328","PortSpecifier":{"PortValue":33328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030580,"nanos":112851227},"http":{"id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ca7d287-b1ee-4bcd-b50a-b3f0da83d6e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33340","PortSpecifier":{"PortValue":33340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33340","PortSpecifier":{"PortValue":33340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030581,"nanos":151255106},"http":{"id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a80fbb90-134c-431e-9711-e6f4a1f4b790","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33342","PortSpecifier":{"PortValue":33342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33342","PortSpecifier":{"PortValue":33342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030582,"nanos":187933143},"http":{"id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"181d1fb1-bf1f-43a8-9119-ca16f0ad7aa8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"566e5575-1322-4396-9a6a-badd44e68793","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33346","PortSpecifier":{"PortValue":33346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"566e5575-1322-4396-9a6a-badd44e68793","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"566e5575-1322-4396-9a6a-badd44e68793","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33346","PortSpecifier":{"PortValue":33346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030583,"nanos":225630605},"http":{"id":"566e5575-1322-4396-9a6a-badd44e68793","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"566e5575-1322-4396-9a6a-badd44e68793","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"566e5575-1322-4396-9a6a-badd44e68793","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"566e5575-1322-4396-9a6a-badd44e68793","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"566e5575-1322-4396-9a6a-badd44e68793","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70fda5c-284b-49bb-877e-44fa93689561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33358","PortSpecifier":{"PortValue":33358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d70fda5c-284b-49bb-877e-44fa93689561","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70fda5c-284b-49bb-877e-44fa93689561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33358","PortSpecifier":{"PortValue":33358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030584,"nanos":260661696},"http":{"id":"d70fda5c-284b-49bb-877e-44fa93689561","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d70fda5c-284b-49bb-877e-44fa93689561","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70fda5c-284b-49bb-877e-44fa93689561","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70fda5c-284b-49bb-877e-44fa93689561","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70fda5c-284b-49bb-877e-44fa93689561","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33360","PortSpecifier":{"PortValue":33360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33360","PortSpecifier":{"PortValue":33360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030585,"nanos":298899300},"http":{"id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"802d8d21-61ef-4065-af8b-7e7e3f6ae0f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33376","PortSpecifier":{"PortValue":33376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","method":"POST","path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions","host":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33376","PortSpecifier":{"PortValue":33376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030586,"nanos":339011539},"http":{"id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","method":"POST","headers":{":authority":"e2e-shared-a-edb549.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TJYQMMLs4yRWaCch_pn47XNqZr0N4W8Ve5swULaiWqCkZ5MSsRQrVKfrc5ma\"}"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","subscription":"e2e-rate-iso-a-4ae55f","tenant":"e2e-shared-a-edb549","userId":"02f22773-795c-491f-a881-73235097f0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\",\"requestedSubscription\":\"e2e-rate-iso-a-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-edb549.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"02f22773-795c-491f-a881-73235097f0ec","keyName":"e2e-rate-a-4ae55f","selected_subscription":"e2e-rate-iso-a-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-a-edb549/e2e-rate-iso-a-4ae55f@ai-tenant-e2e-shared-a-edb549/rate-test-model-edb549","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-edb549","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ae55f","namespace":"ai-tenant-e2e-shared-a-edb549","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"784bba4b-3f28-4f76-b495-16b8f8d1a09b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33898","PortSpecifier":{"PortValue":33898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","method":"POST","path":"/ai-tenant-e2e-shared-b-f2a709/rate-test-model-f2a709/v1/completions","host":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:33898","PortSpecifier":{"PortValue":33898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783030586,"nanos":377682775},"http":{"id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","method":"POST","headers":{":authority":"e2e-shared-b-f2a709.apps.e07daa04-becc-498d-9354-f2c01d5ceb55.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f2a709/rate-test-model-f2a709/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13wY56sxCs998NVxw_mBLBIiklK6pWcepUo1DRBn8Vvu1SGse3t0i6GYXNF5a"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13wY56sxCs998NVxw_mBLBIiklK6pWcepUo1DRBn8Vvu1SGse3t0i6GYXNF5a\"}"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20040f30-1a48-42f8-bb3a-dcd84f3bb20b","keyName":"e2e-rate-b-4ae55f","subscription":"e2e-rate-iso-b-4ae55f","tenant":"e2e-shared-b-f2a709","userId":"20040f30-1a48-42f8-bb3a-dcd84f3bb20b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f2a709/rate-test-model-f2a709\",\"requestedSubscription\":\"e2e-rate-iso-b-4ae55f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f2a709.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f2a709","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4ae55f","namespace":"ai-tenant-e2e-shared-b-f2a709","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f2a709/rate-test-model-f2a709\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4ae55f"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"20040f30-1a48-42f8-bb3a-dcd84f3bb20b","keyName":"e2e-rate-b-4ae55f","selected_subscription":"e2e-rate-iso-b-4ae55f","selected_subscription_key":"ai-tenant-e2e-shared-b-f2a709/e2e-rate-iso-b-4ae55f@ai-tenant-e2e-shared-b-f2a709/rate-test-model-f2a709","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f2a709","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4ae55f","namespace":"ai-tenant-e2e-shared-b-f2a709","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T22:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b810bd7-de3a-41e4-99d7-913f9e84311b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c8290a1196bed32410b54223072ce130a9f09aadde5076892e7addfba123b85"}
{"level":"info","ts":"2026-07-02T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7875b716dc56217fdeabbb030e9ea174204baa9bdf3ce30498b12c15114d299"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df0ecdf1133c592b39cbf21e31bb6cc88f3a66231d86e7b88e3824b92bd7988a"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f793cb9149ba01de7564497357dbea161a62b9a9a3d147db66b3ee69c27add4"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9c05e59b3e9badc65b0866c131ba02f60c14379047247a2ecfd121bfa723bd4"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e51af31269a950f0fdcdcb5737517e3307f6cf9706c026b957a4353a3bfd6cf9"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91466c9dfb2eca68a110aa52429af3fd90e5e94b7a1f51e29df4fee3d7dce941"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab558c9ed006e2c26305d0addd743e9b4c742cb6c6c7e2049e2aeafae64209fc"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d3e20f3422af238ef7d55d0d1bbc38cf2fbe38eb28192a7a9f3f29debdea24e"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/440ebaf2b464ee2654c77e186e03eb0282a61968beb3cc46dd67f9a2dc1a0802"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f18f3ad455fea1b5b88950f6014e89a78967745455acad2d003a26d317d31cae"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de8e906dc0e37bac4087f2d2e7f172048de82c3bc1692dcbe11afc1d6b074cec"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b544db044ff84f771e5c99ba68d5157333620847853a5bb83daef23bdfba0c01"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5704c8e28a3101eea513e2b54b210db02a2c1f83d32f1ad2f191640e559f3ec"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e786750894a799155847637c4aa28a1e64efdca7e30a0533dd26cd87af59779"}
{"level":"info","ts":"2026-07-02T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40041217af0288a74172b958aa5d5f0ff5d46ed0de02b12e46063d2d09e3ff47"}
{"level":"info","ts":"2026-07-02T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85573e0567121ccae6d13dc1b65b1634b14be34716c5d6f0431ea1d37088d0b9"}
{"level":"info","ts":"2026-07-02T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b95f3d5c05414b4b9c7a7929128b94cf5912d334b681548cfd3e534897a27362"}
{"level":"info","ts":"2026-07-02T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f983d363af8b6306a2dfa0fb7dade29f0bbfbf1b0a76bb782314d8e6fd84538"}
{"level":"info","ts":"2026-07-02T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b0dc69170fbdf79a0a4ab3060c0f0e43079f101a7331041523ee29426f1ce7c"}
{"level":"info","ts":"2026-07-02T22:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b3a5060cecaa12a45e8a34a8be7fa66c25107825c4d88b31c0b6ca5494ad012"}
{"level":"info","ts":"2026-07-02T22:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af8ef3d0bcee741e30f5200072d909355bf55facf93348075b9219354682bdf2"}
{"level":"info","ts":"2026-07-02T22:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86042098c839c0b33d9a664067c16e46399a8b22a1ec6eab34d7c1d819ee170d"}
{"level":"info","ts":"2026-07-02T22:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c091553ec0d74b202c9de635b22052c22b521ecf324137fce8e2743bf2429bb3"}