--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"error","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"info","ts":"2026-07-28T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60254","PortSpecifier":{"PortValue":60254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60254","PortSpecifier":{"PortValue":60254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270736,"nanos":279193872},"http":{"id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/auth-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d211f120-1b80-46a0-a1bc-b7f72408a3ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39550","PortSpecifier":{"PortValue":39550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d455e5e-1f56-41c3-8239-57264f074f39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39550","PortSpecifier":{"PortValue":39550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270736,"nanos":330869795},"http":{"id":"3d455e5e-1f56-41c3-8239-57264f074f39","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/auth-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d455e5e-1f56-41c3-8239-57264f074f39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95311a9d-8c68-413a-80a8-026d84d42141","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60262","PortSpecifier":{"PortValue":60262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95311a9d-8c68-413a-80a8-026d84d42141","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95311a9d-8c68-413a-80a8-026d84d42141","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60262","PortSpecifier":{"PortValue":60262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270736,"nanos":375642679},"http":{"id":"95311a9d-8c68-413a-80a8-026d84d42141","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95311a9d-8c68-413a-80a8-026d84d42141","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95311a9d-8c68-413a-80a8-026d84d42141","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95311a9d-8c68-413a-80a8-026d84d42141","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95311a9d-8c68-413a-80a8-026d84d42141","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95311a9d-8c68-413a-80a8-026d84d42141","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95311a9d-8c68-413a-80a8-026d84d42141","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/auth-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95311a9d-8c68-413a-80a8-026d84d42141","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95311a9d-8c68-413a-80a8-026d84d42141","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95311a9d-8c68-413a-80a8-026d84d42141","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95311a9d-8c68-413a-80a8-026d84d42141","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95311a9d-8c68-413a-80a8-026d84d42141","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39556","PortSpecifier":{"PortValue":39556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39556","PortSpecifier":{"PortValue":39556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270736,"nanos":417203652},"http":{"id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/auth-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a5fe5e2-8684-4494-9bf5-a5530389e8f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"info","ts":"2026-07-28T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"info","ts":"2026-07-28T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"info","ts":"2026-07-28T20:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38988","PortSpecifier":{"PortValue":38988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb7472ec-2067-47b0-8690-5f8cd3858906","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38988","PortSpecifier":{"PortValue":38988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270774,"nanos":660260646},"http":{"id":"cb7472ec-2067-47b0-8690-5f8cd3858906","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/auth-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb7472ec-2067-47b0-8690-5f8cd3858906","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ea4e27-3bf4-45de-9067-89298760a213","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39842","PortSpecifier":{"PortValue":39842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73ea4e27-3bf4-45de-9067-89298760a213","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ea4e27-3bf4-45de-9067-89298760a213","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39842","PortSpecifier":{"PortValue":39842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270774,"nanos":726358156},"http":{"id":"73ea4e27-3bf4-45de-9067-89298760a213","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73ea4e27-3bf4-45de-9067-89298760a213","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73ea4e27-3bf4-45de-9067-89298760a213","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73ea4e27-3bf4-45de-9067-89298760a213","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ea4e27-3bf4-45de-9067-89298760a213","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ea4e27-3bf4-45de-9067-89298760a213","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ea4e27-3bf4-45de-9067-89298760a213","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/auth-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73ea4e27-3bf4-45de-9067-89298760a213","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ea4e27-3bf4-45de-9067-89298760a213","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ea4e27-3bf4-45de-9067-89298760a213","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ea4e27-3bf4-45de-9067-89298760a213","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ea4e27-3bf4-45de-9067-89298760a213","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39846","PortSpecifier":{"PortValue":39846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c159a26a-0c4b-4611-92cf-d781ca000379","method":"GET","path":"/maas-api/v1/api-keys/fd151c39-7447-4b10-b8af-0e1523ee4cde","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39846","PortSpecifier":{"PortValue":39846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270774,"nanos":770638201},"http":{"id":"c159a26a-0c4b-4611-92cf-d781ca000379","method":"GET","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fd151c39-7447-4b10-b8af-0e1523ee4cde",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fd151c39-7447-4b10-b8af-0e1523ee4cde",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/auth-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c159a26a-0c4b-4611-92cf-d781ca000379","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39002","PortSpecifier":{"PortValue":39002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df1df274-c469-4cc9-aece-30b303e20fa5","method":"GET","path":"/maas-api/v1/api-keys/fd151c39-7447-4b10-b8af-0e1523ee4cde","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39002","PortSpecifier":{"PortValue":39002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270774,"nanos":807602620},"http":{"id":"df1df274-c469-4cc9-aece-30b303e20fa5","method":"GET","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fd151c39-7447-4b10-b8af-0e1523ee4cde",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fd151c39-7447-4b10-b8af-0e1523ee4cde",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/auth-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df1df274-c469-4cc9-aece-30b303e20fa5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"info","ts":"2026-07-28T20:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"debug","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"error","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:33:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:33:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:33:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:33:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50700","PortSpecifier":{"PortValue":50700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50700","PortSpecifier":{"PortValue":50700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270818,"nanos":191149361},"http":{"id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/auth-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe818418-b4f2-45ce-acf1-a65380d17fb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54192","PortSpecifier":{"PortValue":54192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54192","PortSpecifier":{"PortValue":54192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270818,"nanos":233778177},"http":{"id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/auth-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f835ba6-bf2e-4a0b-961d-edb89e0864e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50704","PortSpecifier":{"PortValue":50704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50704","PortSpecifier":{"PortValue":50704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270818,"nanos":282993783},"http":{"id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ymMbQPiV7d3PQF05_80gPyLkGvSRQ3AtxPz1ynUaeyekV47PWfrUCutANPBE"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ymMbQPiV7d3PQF05_80gPyLkGvSRQ3AtxPz1ynUaeyekV47PWfrUCutANPBE\"}"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cdaebd01-bc72-46ce-a5a5-a0257f3d2061","keyName":"e2e-auth-iso-a-d6fbd7","subscription":"e2e-auth-iso-4d0067","tenant":"e2e-shared-a-ed54db","userId":"cdaebd01-bc72-46ce-a5a5-a0257f3d2061","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/auth-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4d0067"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57dae5aa-9d7c-44a4-83f1-b3f0bd29e338","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02886047ecd5b04638118012061409666316b3e5fc768cc44ccc06413aa7f4ff"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9e69ee2911e17a86c0197be8227bfb87d9f0a40c293e4e373336931cc319139"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b217d8ee6fe6fa260d1b5408ac82742a40f8fe853b7139f57b34fc7ac8189631"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c73484aa1cfd56c445998e903953b05f9f0eeea9d2ab8b3d4eb1dcc1bbfba8a"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1babbc195ff9cf8e87a35e877ed90931e8fda6e1bfc67277bd8541373c2bec37"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aea7dd922d98829cf8ace36c1f23686fc24cf3c8c54c7ba961fdaf8c554c34be"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfbd58cc7b624dc32571d8c760ae0f7b9bdef2437f68c249934afe3f3ac28ead"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d359cd737e9c92747986a44da66180a1dae641991757afd549cce5e668a675fe"}
{"level":"info","ts":"2026-07-28T20:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00eac99e5d97a37ec367d91a7dbe06361e2705b15ecb087675770a1ae19641c5"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e29b5b0fc1054dc629ab8369a7f70b955e2219bb754f8d14a5a2518df7c3bb7e"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5489d874cc35c90eac95f5e632048e31edd8cabf0c55ebce657242e31edae1fe"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8eba0b34c1f1bae998d927a2a7413692447359a7cc1dd0907a285af6c748f56"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/355e516b02c4ccda19a9f308585e9ce00b08b8f2abf9e3237ff18714c1e79984"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ac81ba226f80451d1aa42b7fa7b6beba3a2d16bb4cf487af0d6bb70f235abb"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da023263f80656f1da84f2ac19e72bf00da597cfdd1b56292ea4cd4a8e563c5d"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b91239dfd1b6fcc113ab1f288b66789e17a2a47149ee8684063e895210db5e2"}
{"level":"info","ts":"2026-07-28T20:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3"}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3"}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3"}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39"}
{"level":"error","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39"}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817"}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817"}
{"level":"info","ts":"2026-07-28T20:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c"}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"error","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2345a6c68f13b2593d274fa7b8788284be72f1e45832472f8a26eae7a7cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2345a6c68f13b2593d274fa7b8788284be72f1e45832472f8a26eae7a7cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81342fba2f7b054109c367eb714afb8a2f252b2c4edf517adb612be05b804713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81342fba2f7b054109c367eb714afb8a2f252b2c4edf517adb612be05b804713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a2345a6c68f13b2593d274fa7b8788284be72f1e45832472f8a26eae7a7cd9"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2345a6c68f13b2593d274fa7b8788284be72f1e45832472f8a26eae7a7cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68a2345a6c68f13b2593d274fa7b8788284be72f1e45832472f8a26eae7a7cd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2345a6c68f13b2593d274fa7b8788284be72f1e45832472f8a26eae7a7cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cbc7133b1415d40cdf257de4b9427704f7afd78094f98c13c41d2b380f7cc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81342fba2f7b054109c367eb714afb8a2f252b2c4edf517adb612be05b804713"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cbc7133b1415d40cdf257de4b9427704f7afd78094f98c13c41d2b380f7cc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81342fba2f7b054109c367eb714afb8a2f252b2c4edf517adb612be05b804713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81342fba2f7b054109c367eb714afb8a2f252b2c4edf517adb612be05b804713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81342fba2f7b054109c367eb714afb8a2f252b2c4edf517adb612be05b804713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cbc7133b1415d40cdf257de4b9427704f7afd78094f98c13c41d2b380f7cc2"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd7a8e1feca1500909e33bf8466a2dec447428bb7dbf2239858d827b346891"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef425c27d615c1412543184b378615419b58b151fe30d1ba88aca8ffdd14408"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a2345a6c68f13b2593d274fa7b8788284be72f1e45832472f8a26eae7a7cd9"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbd7a8e1feca1500909e33bf8466a2dec447428bb7dbf2239858d827b346891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dbd7a8e1feca1500909e33bf8466a2dec447428bb7dbf2239858d827b346891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee99c4a3a69be965652930a917d037de6d1daca3bc3bcf66f509a13f5b3c0bc"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca3157b8d8c923d2d366b9e31f0a37d7001d2219b7e0f8d9c8a2bccb9e936150"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbd7a8e1feca1500909e33bf8466a2dec447428bb7dbf2239858d827b346891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef425c27d615c1412543184b378615419b58b151fe30d1ba88aca8ffdd14408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef425c27d615c1412543184b378615419b58b151fe30d1ba88aca8ffdd14408"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296f44a018529775357e958cbc99ef6d47ba441a9916ec7ab8d31c960cf3b9c0"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81342fba2f7b054109c367eb714afb8a2f252b2c4edf517adb612be05b804713"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef425c27d615c1412543184b378615419b58b151fe30d1ba88aca8ffdd14408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68a2345a6c68f13b2593d274fa7b8788284be72f1e45832472f8a26eae7a7cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee99c4a3a69be965652930a917d037de6d1daca3bc3bcf66f509a13f5b3c0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee99c4a3a69be965652930a917d037de6d1daca3bc3bcf66f509a13f5b3c0bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee99c4a3a69be965652930a917d037de6d1daca3bc3bcf66f509a13f5b3c0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca3157b8d8c923d2d366b9e31f0a37d7001d2219b7e0f8d9c8a2bccb9e936150","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca3157b8d8c923d2d366b9e31f0a37d7001d2219b7e0f8d9c8a2bccb9e936150"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd7a8e1feca1500909e33bf8466a2dec447428bb7dbf2239858d827b346891"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef425c27d615c1412543184b378615419b58b151fe30d1ba88aca8ffdd14408"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca3157b8d8c923d2d366b9e31f0a37d7001d2219b7e0f8d9c8a2bccb9e936150","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cbc7133b1415d40cdf257de4b9427704f7afd78094f98c13c41d2b380f7cc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1cbc7133b1415d40cdf257de4b9427704f7afd78094f98c13c41d2b380f7cc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee99c4a3a69be965652930a917d037de6d1daca3bc3bcf66f509a13f5b3c0bc"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca3157b8d8c923d2d366b9e31f0a37d7001d2219b7e0f8d9c8a2bccb9e936150"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cbc7133b1415d40cdf257de4b9427704f7afd78094f98c13c41d2b380f7cc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296f44a018529775357e958cbc99ef6d47ba441a9916ec7ab8d31c960cf3b9c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296f44a018529775357e958cbc99ef6d47ba441a9916ec7ab8d31c960cf3b9c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cbc7133b1415d40cdf257de4b9427704f7afd78094f98c13c41d2b380f7cc2"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296f44a018529775357e958cbc99ef6d47ba441a9916ec7ab8d31c960cf3b9c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81342fba2f7b054109c367eb714afb8a2f252b2c4edf517adb612be05b804713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296f44a018529775357e958cbc99ef6d47ba441a9916ec7ab8d31c960cf3b9c0"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd7a8e1feca1500909e33bf8466a2dec447428bb7dbf2239858d827b346891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef425c27d615c1412543184b378615419b58b151fe30d1ba88aca8ffdd14408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee99c4a3a69be965652930a917d037de6d1daca3bc3bcf66f509a13f5b3c0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca3157b8d8c923d2d366b9e31f0a37d7001d2219b7e0f8d9c8a2bccb9e936150","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cbc7133b1415d40cdf257de4b9427704f7afd78094f98c13c41d2b380f7cc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296f44a018529775357e958cbc99ef6d47ba441a9916ec7ab8d31c960cf3b9c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"error","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35140","PortSpecifier":{"PortValue":35140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35140","PortSpecifier":{"PortValue":35140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270913,"nanos":218762181},"http":{"id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/sub-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bd19d73-1810-478a-82e4-6f03c7da20b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55856","PortSpecifier":{"PortValue":55856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55856","PortSpecifier":{"PortValue":55856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270913,"nanos":273941816},"http":{"id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/sub-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acdb043b-3d9d-45ce-86c8-ef94b44d6bb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60401eae-4238-44f3-8179-547af73e20cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35150","PortSpecifier":{"PortValue":35150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60401eae-4238-44f3-8179-547af73e20cd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60401eae-4238-44f3-8179-547af73e20cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35150","PortSpecifier":{"PortValue":35150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270913,"nanos":322107903},"http":{"id":"60401eae-4238-44f3-8179-547af73e20cd","method":"GET","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hEhYqUrgORvputT6_IsqfHdDjWeXzlEOLPwz7QOLMXTzbaBY9bWAQ0reyi3Z"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hEhYqUrgORvputT6_IsqfHdDjWeXzlEOLPwz7QOLMXTzbaBY9bWAQ0reyi3Z\"}"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9897ceea-dfa8-4f2d-8175-8d1ad354c5a5","keyName":"e2e-sub-iso-36d2fb","subscription":"e2e-a-only-7c69b7","tenant":"e2e-shared-a-ed54db","userId":"9897ceea-dfa8-4f2d-8175-8d1ad354c5a5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60401eae-4238-44f3-8179-547af73e20cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/sub-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-7c69b7"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60401eae-4238-44f3-8179-547af73e20cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60401eae-4238-44f3-8179-547af73e20cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60401eae-4238-44f3-8179-547af73e20cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653b0003-931a-4106-bc99-96371f490153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55866","PortSpecifier":{"PortValue":55866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"653b0003-931a-4106-bc99-96371f490153","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653b0003-931a-4106-bc99-96371f490153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55866","PortSpecifier":{"PortValue":55866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270913,"nanos":368986332},"http":{"id":"653b0003-931a-4106-bc99-96371f490153","method":"GET","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"653b0003-931a-4106-bc99-96371f490153","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZnzIaMk4L9ZWB4g6_7ZMfeMpSIyyl65utlQObv2Y8ojau50qeZlBlt53Vlyo"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"653b0003-931a-4106-bc99-96371f490153","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1231ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZnzIaMk4L9ZWB4g6_7ZMfeMpSIyyl65utlQObv2Y8ojau50qeZlBlt53Vlyo\"}"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"653b0003-931a-4106-bc99-96371f490153","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1231ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ac6a1ab-3657-4908-9628-365635b854cd","keyName":"e2e-sub-iso-870d32","subscription":"e2e-b-only-7c69b7","tenant":"e2e-shared-b-1231ba","userId":"9ac6a1ab-3657-4908-9628-365635b854cd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"653b0003-931a-4106-bc99-96371f490153","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653b0003-931a-4106-bc99-96371f490153","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653b0003-931a-4106-bc99-96371f490153","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653b0003-931a-4106-bc99-96371f490153","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/sub-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"653b0003-931a-4106-bc99-96371f490153","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653b0003-931a-4106-bc99-96371f490153","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653b0003-931a-4106-bc99-96371f490153","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653b0003-931a-4106-bc99-96371f490153","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-7c69b7"}
{"level":"info","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653b0003-931a-4106-bc99-96371f490153","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653b0003-931a-4106-bc99-96371f490153","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44446","PortSpecifier":{"PortValue":44446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44446","PortSpecifier":{"PortValue":44446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270933,"nanos":235086452},"http":{"id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/sub-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8df65c88-5a9f-400a-8da0-9d4946d0410c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55136","PortSpecifier":{"PortValue":55136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55136","PortSpecifier":{"PortValue":55136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270933,"nanos":277440347},"http":{"id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/sub-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62eb79f-93b5-48bf-a338-2ebd79245c70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44460","PortSpecifier":{"PortValue":44460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cbe1964-e922-488d-9834-cd18edbe6998","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44460","PortSpecifier":{"PortValue":44460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270933,"nanos":317568988},"http":{"id":"8cbe1964-e922-488d-9834-cd18edbe6998","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bFYVQtsfGgo5L2dh_UaiWbZSr26PVfz7BHkOJLWRJkq4cQeB4IbmxWQnRZpS"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bFYVQtsfGgo5L2dh_UaiWbZSr26PVfz7BHkOJLWRJkq4cQeB4IbmxWQnRZpS\"}"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"33d315df-fb93-43be-9ef5-89a7657372c7","keyName":"e2e-sub-iso-cef17a","subscription":"e2e-shared-sub-778b1f","tenant":"e2e-shared-a-ed54db","userId":"33d315df-fb93-43be-9ef5-89a7657372c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/sub-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-778b1f"}
{"level":"info","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cbe1964-e922-488d-9834-cd18edbe6998","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270933,"nanos":351107223},"http":{"id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e1F3tlhdb9ueoDA4_lf4uJjPM84DRzBkFTtvDlFtiETN3YMCZkWX15UofPzM"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1231ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e1F3tlhdb9ueoDA4_lf4uJjPM84DRzBkFTtvDlFtiETN3YMCZkWX15UofPzM\"}"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1231ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9988bb23-aa2a-44be-aae3-06cfe42f0396","keyName":"e2e-sub-iso-955056","subscription":"e2e-shared-sub-778b1f","tenant":"e2e-shared-b-1231ba","userId":"9988bb23-aa2a-44be-aae3-06cfe42f0396","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/sub-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-778b1f"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f8af0f-00c7-4d6e-88e5-ee83ac3e2b93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52007eb66982b8fdd582a9f21b6d58c39e2b7238a1604f7dd735e01651c2876c"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/330dede205db14eb3cf4e7d9027e1ba9b8efad0dde81475a6cd000d714f7af39"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ef425c27d615c1412543184b378615419b58b151fe30d1ba88aca8ffdd14408"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dbd7a8e1feca1500909e33bf8466a2dec447428bb7dbf2239858d827b346891"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33c0cb81f746d4489caf142d9bef7cc144ee3ced210c87e5b60c0a64415f2817"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c199d46b339befa2ce899ea89bd4cceb6313a1f9c2f8fc926ca68e45603f3a3"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f809b70710f45b13cc68b73ac979a78b1eb0ada4505062e2e20a7e06fe294a2"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30b3c38abf4645e06503b3b461556dd0c17a9bf7863e600eea82af01b96defb6"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1cbc7133b1415d40cdf257de4b9427704f7afd78094f98c13c41d2b380f7cc2"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81342fba2f7b054109c367eb714afb8a2f252b2c4edf517adb612be05b804713"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca3157b8d8c923d2d366b9e31f0a37d7001d2219b7e0f8d9c8a2bccb9e936150"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/296f44a018529775357e958cbc99ef6d47ba441a9916ec7ab8d31c960cf3b9c0"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ee99c4a3a69be965652930a917d037de6d1daca3bc3bcf66f509a13f5b3c0bc"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ec5691bae666cd723abbe31125113de34a22d9802df20dace4c970fbf55ce14"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68a2345a6c68f13b2593d274fa7b8788284be72f1e45832472f8a26eae7a7cd9"}
{"level":"info","ts":"2026-07-28T20:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5384068a1903e19906205f6fb563f7fc88ffd9db1330ef77f92c5fb275e04056"}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"error","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f4b448fc17294a52626ec382b294ed42b5f48d8e248dbfe8f638e9802e5c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f4b448fc17294a52626ec382b294ed42b5f48d8e248dbfe8f638e9802e5c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f4b448fc17294a52626ec382b294ed42b5f48d8e248dbfe8f638e9802e5c65"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f4b448fc17294a52626ec382b294ed42b5f48d8e248dbfe8f638e9802e5c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f4b448fc17294a52626ec382b294ed42b5f48d8e248dbfe8f638e9802e5c65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f4b448fc17294a52626ec382b294ed42b5f48d8e248dbfe8f638e9802e5c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f4b448fc17294a52626ec382b294ed42b5f48d8e248dbfe8f638e9802e5c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f4b448fc17294a52626ec382b294ed42b5f48d8e248dbfe8f638e9802e5c65"}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"debug","ts":"2026-07-28T20:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfd8110ef213f96a7b7a3aefd7b172133786722e6fae461ddf9a71851ef1807b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfd8110ef213f96a7b7a3aefd7b172133786722e6fae461ddf9a71851ef1807b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae5fe4665bcedc1e1f628901bb1e36ba8752a69be91eda1b7ea1ef8de23124f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfd8110ef213f96a7b7a3aefd7b172133786722e6fae461ddf9a71851ef1807b"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae5fe4665bcedc1e1f628901bb1e36ba8752a69be91eda1b7ea1ef8de23124f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfd8110ef213f96a7b7a3aefd7b172133786722e6fae461ddf9a71851ef1807b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfd8110ef213f96a7b7a3aefd7b172133786722e6fae461ddf9a71851ef1807b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfd8110ef213f96a7b7a3aefd7b172133786722e6fae461ddf9a71851ef1807b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae5fe4665bcedc1e1f628901bb1e36ba8752a69be91eda1b7ea1ef8de23124f"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae5fe4665bcedc1e1f628901bb1e36ba8752a69be91eda1b7ea1ef8de23124f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ae5fe4665bcedc1e1f628901bb1e36ba8752a69be91eda1b7ea1ef8de23124f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae5fe4665bcedc1e1f628901bb1e36ba8752a69be91eda1b7ea1ef8de23124f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfd8110ef213f96a7b7a3aefd7b172133786722e6fae461ddf9a71851ef1807b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ae5fe4665bcedc1e1f628901bb1e36ba8752a69be91eda1b7ea1ef8de23124f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9846f868a20d3b25b9c9c1bc22b5dd29dde1c057bb286ae02843aecdadef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfd8110ef213f96a7b7a3aefd7b172133786722e6fae461ddf9a71851ef1807b"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9846f868a20d3b25b9c9c1bc22b5dd29dde1c057bb286ae02843aecdadef4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae5fe4665bcedc1e1f628901bb1e36ba8752a69be91eda1b7ea1ef8de23124f"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9846f868a20d3b25b9c9c1bc22b5dd29dde1c057bb286ae02843aecdadef4b"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9846f868a20d3b25b9c9c1bc22b5dd29dde1c057bb286ae02843aecdadef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b9846f868a20d3b25b9c9c1bc22b5dd29dde1c057bb286ae02843aecdadef4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c72d1953383801616ada3d5e46f791685f250dd6c2c995cbeb9d9f28bd21c8d"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a8521f367d377df44bf6a67429af3e324a9de07fa131f37084cd8fc17f9a43"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9846f868a20d3b25b9c9c1bc22b5dd29dde1c057bb286ae02843aecdadef4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c72d1953383801616ada3d5e46f791685f250dd6c2c995cbeb9d9f28bd21c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c72d1953383801616ada3d5e46f791685f250dd6c2c995cbeb9d9f28bd21c8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db12fed431ab6503aad38f3da45dccc5fa5f23543555eda6f466571c78da500"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c72d1953383801616ada3d5e46f791685f250dd6c2c995cbeb9d9f28bd21c8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a8521f367d377df44bf6a67429af3e324a9de07fa131f37084cd8fc17f9a43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a8521f367d377df44bf6a67429af3e324a9de07fa131f37084cd8fc17f9a43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c644852781cc171173b877e587159c1efc77da0432f9e3d8de15f9e0c03e4b8"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9846f868a20d3b25b9c9c1bc22b5dd29dde1c057bb286ae02843aecdadef4b"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a8521f367d377df44bf6a67429af3e324a9de07fa131f37084cd8fc17f9a43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81568bb7744a7fe5646d3c6986eb941d12e83c2df7f4c6a4e671a2efd8588456"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba017488106351a20ba0df814e28602e54f62d1c05b12ae548082a6e7920da49"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db12fed431ab6503aad38f3da45dccc5fa5f23543555eda6f466571c78da500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db12fed431ab6503aad38f3da45dccc5fa5f23543555eda6f466571c78da500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c72d1953383801616ada3d5e46f791685f250dd6c2c995cbeb9d9f28bd21c8d"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0656a174d321a479d53cd7b0f3f239da62acdba7d8ec5339fa6c3c04c1e41d"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db12fed431ab6503aad38f3da45dccc5fa5f23543555eda6f466571c78da500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c644852781cc171173b877e587159c1efc77da0432f9e3d8de15f9e0c03e4b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c644852781cc171173b877e587159c1efc77da0432f9e3d8de15f9e0c03e4b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583e78e517d083697359cae7525192e2fc79a55fe23088602ace25b49deaf997"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c644852781cc171173b877e587159c1efc77da0432f9e3d8de15f9e0c03e4b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b9846f868a20d3b25b9c9c1bc22b5dd29dde1c057bb286ae02843aecdadef4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81568bb7744a7fe5646d3c6986eb941d12e83c2df7f4c6a4e671a2efd8588456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81568bb7744a7fe5646d3c6986eb941d12e83c2df7f4c6a4e671a2efd8588456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a8521f367d377df44bf6a67429af3e324a9de07fa131f37084cd8fc17f9a43"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81568bb7744a7fe5646d3c6986eb941d12e83c2df7f4c6a4e671a2efd8588456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba017488106351a20ba0df814e28602e54f62d1c05b12ae548082a6e7920da49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba017488106351a20ba0df814e28602e54f62d1c05b12ae548082a6e7920da49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db12fed431ab6503aad38f3da45dccc5fa5f23543555eda6f466571c78da500"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba017488106351a20ba0df814e28602e54f62d1c05b12ae548082a6e7920da49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c72d1953383801616ada3d5e46f791685f250dd6c2c995cbeb9d9f28bd21c8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d0656a174d321a479d53cd7b0f3f239da62acdba7d8ec5339fa6c3c04c1e41d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d0656a174d321a479d53cd7b0f3f239da62acdba7d8ec5339fa6c3c04c1e41d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c644852781cc171173b877e587159c1efc77da0432f9e3d8de15f9e0c03e4b8"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81568bb7744a7fe5646d3c6986eb941d12e83c2df7f4c6a4e671a2efd8588456"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d0656a174d321a479d53cd7b0f3f239da62acdba7d8ec5339fa6c3c04c1e41d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583e78e517d083697359cae7525192e2fc79a55fe23088602ace25b49deaf997","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["583e78e517d083697359cae7525192e2fc79a55fe23088602ace25b49deaf997"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba017488106351a20ba0df814e28602e54f62d1c05b12ae548082a6e7920da49"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0656a174d321a479d53cd7b0f3f239da62acdba7d8ec5339fa6c3c04c1e41d"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583e78e517d083697359cae7525192e2fc79a55fe23088602ace25b49deaf997","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583e78e517d083697359cae7525192e2fc79a55fe23088602ace25b49deaf997"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a8521f367d377df44bf6a67429af3e324a9de07fa131f37084cd8fc17f9a43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db12fed431ab6503aad38f3da45dccc5fa5f23543555eda6f466571c78da500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c644852781cc171173b877e587159c1efc77da0432f9e3d8de15f9e0c03e4b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81568bb7744a7fe5646d3c6986eb941d12e83c2df7f4c6a4e671a2efd8588456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba017488106351a20ba0df814e28602e54f62d1c05b12ae548082a6e7920da49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d0656a174d321a479d53cd7b0f3f239da62acdba7d8ec5339fa6c3c04c1e41d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583e78e517d083697359cae7525192e2fc79a55fe23088602ace25b49deaf997","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:37:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f"}
{"level":"info","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f"}
{"level":"debug","ts":"2026-07-28T20:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:37:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:37:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f"}
{"level":"info","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37156","PortSpecifier":{"PortValue":37156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36a26916-9834-4602-9b31-bb6b573af0d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37156","PortSpecifier":{"PortValue":37156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271058,"nanos":873289560},"http":{"id":"36a26916-9834-4602-9b31-bb6b573af0d2","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36a26916-9834-4602-9b31-bb6b573af0d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39438","PortSpecifier":{"PortValue":39438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39438","PortSpecifier":{"PortValue":39438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271058,"nanos":917858110},"http":{"id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/rate-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd88575b-3560-4e8c-a8a3-67256d1cb632","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37172","PortSpecifier":{"PortValue":37172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","method":"POST","path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37172","PortSpecifier":{"PortValue":37172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271058,"nanos":960394440},"http":{"id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Dcvpmk8dKrayA85k_7nePWZsONcxBoNApRgS9DjeYb9sXplfp4TglJgaR3Bl"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Dcvpmk8dKrayA85k_7nePWZsONcxBoNApRgS9DjeYb9sXplfp4TglJgaR3Bl\"}"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"71f3605d-ffd5-42d0-b5de-2976f61be025","keyName":"e2e-rate-a-c01d9c","subscription":"e2e-rate-iso-a-c01d9c","tenant":"e2e-shared-a-ed54db","userId":"71f3605d-ffd5-42d0-b5de-2976f61be025","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\",\"requestedSubscription\":\"e2e-rate-iso-a-c01d9c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c01d9c","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c01d9c"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"71f3605d-ffd5-42d0-b5de-2976f61be025","keyName":"e2e-rate-a-c01d9c","selected_subscription":"e2e-rate-iso-a-c01d9c","selected_subscription_key":"ai-tenant-e2e-shared-a-ed54db/e2e-rate-iso-a-c01d9c@ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c01d9c","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f828a12c-4b04-49a0-8e29-bb6aa1b778eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37184","PortSpecifier":{"PortValue":37184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","method":"POST","path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37184","PortSpecifier":{"PortValue":37184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271060,"nanos":53069945},"http":{"id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Dcvpmk8dKrayA85k_7nePWZsONcxBoNApRgS9DjeYb9sXplfp4TglJgaR3Bl"}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Dcvpmk8dKrayA85k_7nePWZsONcxBoNApRgS9DjeYb9sXplfp4TglJgaR3Bl\"}"}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"71f3605d-ffd5-42d0-b5de-2976f61be025","keyName":"e2e-rate-a-c01d9c","subscription":"e2e-rate-iso-a-c01d9c","tenant":"e2e-shared-a-ed54db","userId":"71f3605d-ffd5-42d0-b5de-2976f61be025","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\",\"requestedSubscription\":\"e2e-rate-iso-a-c01d9c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c01d9c","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"}}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c01d9c"}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"71f3605d-ffd5-42d0-b5de-2976f61be025","keyName":"e2e-rate-a-c01d9c","selected_subscription":"e2e-rate-iso-a-c01d9c","selected_subscription_key":"ai-tenant-e2e-shared-a-ed54db/e2e-rate-iso-a-c01d9c@ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c01d9c","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46f14e4f-e677-4dd4-a033-2d3c48ba2da2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37196","PortSpecifier":{"PortValue":37196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0729871-a4f0-40bf-aa78-932878bd72e9","method":"POST","path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37196","PortSpecifier":{"PortValue":37196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271061,"nanos":95454754},"http":{"id":"a0729871-a4f0-40bf-aa78-932878bd72e9","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Dcvpmk8dKrayA85k_7nePWZsONcxBoNApRgS9DjeYb9sXplfp4TglJgaR3Bl"}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Dcvpmk8dKrayA85k_7nePWZsONcxBoNApRgS9DjeYb9sXplfp4TglJgaR3Bl\"}"}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"71f3605d-ffd5-42d0-b5de-2976f61be025","keyName":"e2e-rate-a-c01d9c","subscription":"e2e-rate-iso-a-c01d9c","tenant":"e2e-shared-a-ed54db","userId":"71f3605d-ffd5-42d0-b5de-2976f61be025","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\",\"requestedSubscription\":\"e2e-rate-iso-a-c01d9c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c01d9c","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"}}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c01d9c"}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"71f3605d-ffd5-42d0-b5de-2976f61be025","keyName":"e2e-rate-a-c01d9c","selected_subscription":"e2e-rate-iso-a-c01d9c","selected_subscription_key":"ai-tenant-e2e-shared-a-ed54db/e2e-rate-iso-a-c01d9c@ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c01d9c","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0729871-a4f0-40bf-aa78-932878bd72e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53238","PortSpecifier":{"PortValue":53238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53238","PortSpecifier":{"PortValue":53238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271082,"nanos":494431325},"http":{"id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdb3cab-5d96-4cc5-aec1-ec2c91a5a6a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38002","PortSpecifier":{"PortValue":38002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b80d5db7-f7c3-494d-b289-62f27f975c08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38002","PortSpecifier":{"PortValue":38002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271082,"nanos":534873573},"http":{"id":"b80d5db7-f7c3-494d-b289-62f27f975c08","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/rate-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b80d5db7-f7c3-494d-b289-62f27f975c08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53252","PortSpecifier":{"PortValue":53252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3437d29a-26d9-49e0-a78e-2ecab70281df","method":"POST","path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53252","PortSpecifier":{"PortValue":53252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271082,"nanos":568785772},"http":{"id":"3437d29a-26d9-49e0-a78e-2ecab70281df","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j\"}"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","subscription":"e2e-rate-iso-a-295d9a","tenant":"e2e-shared-a-ed54db","userId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\",\"requestedSubscription\":\"e2e-rate-iso-a-295d9a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-295d9a"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","selected_subscription":"e2e-rate-iso-a-295d9a","selected_subscription_key":"ai-tenant-e2e-shared-a-ed54db/e2e-rate-iso-a-295d9a@ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:38:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3437d29a-26d9-49e0-a78e-2ecab70281df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67926809-364c-4033-af0d-a910bbd32b32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53260","PortSpecifier":{"PortValue":53260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67926809-364c-4033-af0d-a910bbd32b32","method":"POST","path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67926809-364c-4033-af0d-a910bbd32b32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53260","PortSpecifier":{"PortValue":53260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271083,"nanos":612813044},"http":{"id":"67926809-364c-4033-af0d-a910bbd32b32","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j"}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j\"}"}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","subscription":"e2e-rate-iso-a-295d9a","tenant":"e2e-shared-a-ed54db","userId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\",\"requestedSubscription\":\"e2e-rate-iso-a-295d9a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"}}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67926809-364c-4033-af0d-a910bbd32b32","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-295d9a"}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67926809-364c-4033-af0d-a910bbd32b32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","selected_subscription":"e2e-rate-iso-a-295d9a","selected_subscription_key":"ai-tenant-e2e-shared-a-ed54db/e2e-rate-iso-a-295d9a@ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67926809-364c-4033-af0d-a910bbd32b32","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67926809-364c-4033-af0d-a910bbd32b32","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"602c6037-4e41-48a1-9929-357809d6a70e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55002","PortSpecifier":{"PortValue":55002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"602c6037-4e41-48a1-9929-357809d6a70e","method":"POST","path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"602c6037-4e41-48a1-9929-357809d6a70e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55002","PortSpecifier":{"PortValue":55002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271084,"nanos":652158462},"http":{"id":"602c6037-4e41-48a1-9929-357809d6a70e","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j"}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j\"}"}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","subscription":"e2e-rate-iso-a-295d9a","tenant":"e2e-shared-a-ed54db","userId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\",\"requestedSubscription\":\"e2e-rate-iso-a-295d9a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"}}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"602c6037-4e41-48a1-9929-357809d6a70e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-295d9a"}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"602c6037-4e41-48a1-9929-357809d6a70e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","selected_subscription":"e2e-rate-iso-a-295d9a","selected_subscription_key":"ai-tenant-e2e-shared-a-ed54db/e2e-rate-iso-a-295d9a@ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"602c6037-4e41-48a1-9929-357809d6a70e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:38:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"602c6037-4e41-48a1-9929-357809d6a70e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07d10a98-f610-438f-b39b-2f413612cdcf","method":"POST","path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271085,"nanos":695665679},"http":{"id":"07d10a98-f610-438f-b39b-2f413612cdcf","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j"}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j\"}"}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","subscription":"e2e-rate-iso-a-295d9a","tenant":"e2e-shared-a-ed54db","userId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\",\"requestedSubscription\":\"e2e-rate-iso-a-295d9a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"}}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-295d9a"}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","selected_subscription":"e2e-rate-iso-a-295d9a","selected_subscription_key":"ai-tenant-e2e-shared-a-ed54db/e2e-rate-iso-a-295d9a@ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:38:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d10a98-f610-438f-b39b-2f413612cdcf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55016","PortSpecifier":{"PortValue":55016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","method":"POST","path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55016","PortSpecifier":{"PortValue":55016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271086,"nanos":741699398},"http":{"id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j"}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j\"}"}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","subscription":"e2e-rate-iso-a-295d9a","tenant":"e2e-shared-a-ed54db","userId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\",\"requestedSubscription\":\"e2e-rate-iso-a-295d9a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"}}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-295d9a"}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","selected_subscription":"e2e-rate-iso-a-295d9a","selected_subscription_key":"ai-tenant-e2e-shared-a-ed54db/e2e-rate-iso-a-295d9a@ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32a07ff6-5298-443f-ada9-8ec2ba43c4fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55024","PortSpecifier":{"PortValue":55024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","method":"POST","path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions","host":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55024","PortSpecifier":{"PortValue":55024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271087,"nanos":781826806},"http":{"id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","method":"POST","headers":{":authority":"e2e-shared-a-ed54db.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2jcnBRToTxNCyx4I_kFbNawTW4gKTn6IUAaWQKwexozmSdzbP7m7zJ6Tvn6j\"}"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","subscription":"e2e-rate-iso-a-295d9a","tenant":"e2e-shared-a-ed54db","userId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\",\"requestedSubscription\":\"e2e-rate-iso-a-295d9a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed54db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-295d9a"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c980b22b-fe92-436c-b2f5-99bbcf9bb18e","keyName":"e2e-rate-a-295d9a","selected_subscription":"e2e-rate-iso-a-295d9a","selected_subscription_key":"ai-tenant-e2e-shared-a-ed54db/e2e-rate-iso-a-295d9a@ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed54db/models/facebook/opt-125m","name":"rate-test-model-ed54db","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-295d9a","namespace":"ai-tenant-e2e-shared-a-ed54db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed54db/rate-test-model-ed54db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ebf5fc-e012-4fc6-8a21-ff089785d42d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57860","PortSpecifier":{"PortValue":57860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","method":"POST","path":"/ai-tenant-e2e-shared-b-1231ba/rate-test-model-1231ba/v1/completions","host":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57860","PortSpecifier":{"PortValue":57860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271087,"nanos":820037910},"http":{"id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","method":"POST","headers":{":authority":"e2e-shared-b-1231ba.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1231ba/rate-test-model-1231ba/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CwKqXWsKcV2K4Y0e_t5vmQzeLTV3dNCqGvb5dIDYKVZgLhYPbqdI4dzLvNqQ"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1231ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CwKqXWsKcV2K4Y0e_t5vmQzeLTV3dNCqGvb5dIDYKVZgLhYPbqdI4dzLvNqQ\"}"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1231ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d5d0d13-e272-4975-b4aa-5e1f83aca43f","keyName":"e2e-rate-b-295d9a","subscription":"e2e-rate-iso-b-295d9a","tenant":"e2e-shared-b-1231ba","userId":"9d5d0d13-e272-4975-b4aa-5e1f83aca43f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1231ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1231ba/rate-test-model-1231ba\",\"requestedSubscription\":\"e2e-rate-iso-b-295d9a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1231ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m","name":"rate-test-model-1231ba","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-295d9a","namespace":"ai-tenant-e2e-shared-b-1231ba","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1231ba/rate-test-model-1231ba"}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1231ba/rate-test-model-1231ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-295d9a"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d5d0d13-e272-4975-b4aa-5e1f83aca43f","keyName":"e2e-rate-b-295d9a","selected_subscription":"e2e-rate-iso-b-295d9a","selected_subscription_key":"ai-tenant-e2e-shared-b-1231ba/e2e-rate-iso-b-295d9a@ai-tenant-e2e-shared-b-1231ba/rate-test-model-1231ba","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1231ba/models/facebook/opt-125m","name":"rate-test-model-1231ba","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-295d9a","namespace":"ai-tenant-e2e-shared-b-1231ba","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1231ba/rate-test-model-1231ba"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:38:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc0604c9-bddd-465a-9860-e2108e73ba7e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ae5fe4665bcedc1e1f628901bb1e36ba8752a69be91eda1b7ea1ef8de23124f"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d3485cce72a1ecffc29c29f6901829f08dce3a1d856f11e5f11d89e303d638d"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f183119fa52e07dbd2b6d8c752b7ef2594320855b2e07a4223cfbe810678948"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8cf541081bc7c05b0a2ef06fe51fc9b8a4fdfe7160a4a926644b2f50e870af"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d0656a174d321a479d53cd7b0f3f239da62acdba7d8ec5339fa6c3c04c1e41d"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db12fed431ab6503aad38f3da45dccc5fa5f23543555eda6f466571c78da500"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c2fee303afc75f045588a5377a6defd12283b593151cb1ab516193a1ddd16a5"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81568bb7744a7fe5646d3c6986eb941d12e83c2df7f4c6a4e671a2efd8588456"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d41fbe70e13c13a9c7668f79cd0135d3165f23b11a2109c3a531b7cf4e26eb"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85e0f1d84716fb9de8007840186b48d64dace2ac86b1949b1b3c8385103ae86b"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6a8521f367d377df44bf6a67429af3e324a9de07fa131f37084cd8fc17f9a43"}
{"level":"info","ts":"2026-07-28T20:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6e029377131f0e139c8225d732a2565b6b147eafbcb74c836b704f6b3665267"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c72d1953383801616ada3d5e46f791685f250dd6c2c995cbeb9d9f28bd21c8d"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfd8110ef213f96a7b7a3aefd7b172133786722e6fae461ddf9a71851ef1807b"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b40a252f2e7be47eeac9e0c83bc13bf8945279b883122c7c7e5ed8b1793ce716"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba017488106351a20ba0df814e28602e54f62d1c05b12ae548082a6e7920da49"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78f4b448fc17294a52626ec382b294ed42b5f48d8e248dbfe8f638e9802e5c65"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d40b8d23b36f5632f2addea0a419f22e4b5590bd8ad9d340c25cd082d53ca3fd"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73ad187104c263a8e73979a0564493cdf9b8900a97b1611451aa9ab9dbe9031f"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/583e78e517d083697359cae7525192e2fc79a55fe23088602ace25b49deaf997"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb0dee54ab9163e23e0a3f3c6860a188e54a27688c5fe580d14964459457d752"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cbfea960127abc2169caf5439f403bbf96506dea9105ef0e692ac0aef007413"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b9846f868a20d3b25b9c9c1bc22b5dd29dde1c057bb286ae02843aecdadef4b"}
{"level":"info","ts":"2026-07-28T20:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c644852781cc171173b877e587159c1efc77da0432f9e3d8de15f9e0c03e4b8"}
{"level":"info","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59210","PortSpecifier":{"PortValue":59210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59210","PortSpecifier":{"PortValue":59210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271171,"nanos":831758009},"http":{"id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","method":"POST","headers":{":authority":"maas.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d0b5359-3bb7-4483-a68c-773c913b4d63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59226","PortSpecifier":{"PortValue":59226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59226","PortSpecifier":{"PortValue":59226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271171,"nanos":883929847},"http":{"id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","method":"POST","headers":{":authority":"maas.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xzMS4U6z8YBonfl2_NRoi6UF52x81sIBub2vhAwvM4K70iSwfJRy5YJ7vVYO"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xzMS4U6z8YBonfl2_NRoi6UF52x81sIBub2vhAwvM4K70iSwfJRy5YJ7vVYO\"}"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"663ce1f1-eb28-4451-9024-ce6eac2b89ef","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"663ce1f1-eb28-4451-9024-ce6eac2b89ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"663ce1f1-eb28-4451-9024-ce6eac2b89ef","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3a4772c-dc71-4ceb-90da-0d57daf0911d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"}
{"level":"error","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5"}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"error","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5"}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4"}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5f89f33c497cf5bb0294684e063b730ef08b196a6a991d1b53f19716f5525a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5f89f33c497cf5bb0294684e063b730ef08b196a6a991d1b53f19716f5525a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4"}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5f89f33c497cf5bb0294684e063b730ef08b196a6a991d1b53f19716f5525a"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18678f42b3664888e8ed4cd56607a1676f27f8d9ec36aeb9d1bae9fec2085b50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18678f42b3664888e8ed4cd56607a1676f27f8d9ec36aeb9d1bae9fec2085b50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5f89f33c497cf5bb0294684e063b730ef08b196a6a991d1b53f19716f5525a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c5f89f33c497cf5bb0294684e063b730ef08b196a6a991d1b53f19716f5525a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18678f42b3664888e8ed4cd56607a1676f27f8d9ec36aeb9d1bae9fec2085b50"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5f89f33c497cf5bb0294684e063b730ef08b196a6a991d1b53f19716f5525a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18678f42b3664888e8ed4cd56607a1676f27f8d9ec36aeb9d1bae9fec2085b50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18678f42b3664888e8ed4cd56607a1676f27f8d9ec36aeb9d1bae9fec2085b50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18678f42b3664888e8ed4cd56607a1676f27f8d9ec36aeb9d1bae9fec2085b50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5f89f33c497cf5bb0294684e063b730ef08b196a6a991d1b53f19716f5525a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18678f42b3664888e8ed4cd56607a1676f27f8d9ec36aeb9d1bae9fec2085b50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5f89f33c497cf5bb0294684e063b730ef08b196a6a991d1b53f19716f5525a"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793"}
{"level":"info","ts":"2026-07-28T20:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18678f42b3664888e8ed4cd56607a1676f27f8d9ec36aeb9d1bae9fec2085b50"}
{"level":"info","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52110","PortSpecifier":{"PortValue":52110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-92ba10.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52110","PortSpecifier":{"PortValue":52110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271222,"nanos":264226526},"http":{"id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","method":"POST","headers":{":authority":"e2e-ipp-a-92ba10.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"]}}
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/82554535de06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f860f24-ee5a-4f26-a017-c5386aa59035"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f436c4ef-cabd-461b-b8a0-5cd04b4074b1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.84:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-92ba10.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-92ba10/ipp-route-92ba10\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-92ba10/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:40:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"702672d7-7bc7-4991-ac88-218c54fbfbdf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96397308-894d-4d7d-a340-8b77fd298095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48368","PortSpecifier":{"PortValue":48368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96397308-894d-4d7d-a340-8b77fd298095","method":"POST","path":"/ai-tenant-e2e-ipp-a-92ba10/ipp-route-92ba10/v1/chat/completions","host":"e2e-ipp-a-92ba10.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96397308-894d-4d7d-a340-8b77fd298095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48368","PortSpecifier":{"PortValue":48368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785271224,"nanos":336111790},"http":{"id":"96397308-894d-4d7d-a340-8b77fd298095","method":"POST","headers":{":authority":"e2e-ipp-a-92ba10.apps.4777417d-3e11-4e76-9cba-82554535de06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-92ba10/ipp-route-92ba10/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rODHVzqIwqJgxhSS_Gtz9EymgoyhxE2UFsFUCtgEarAKxDqRtgc64twiHgeU"}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-92ba10.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rODHVzqIwqJgxhSS_Gtz9EymgoyhxE2UFsFUCtgEarAKxDqRtgc64twiHgeU\"}"}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-92ba10.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f32bfa23-c685-4f02-9828-a79c59837bf5","keyName":"e2e-ipp-92ba10","subscription":"ipp-route-92ba10-sub","tenant":"e2e-ipp-a-92ba10","userId":"f32bfa23-c685-4f02-9828-a79c59837bf5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-92ba10.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-92ba10/ipp-route-92ba10\",\"requestedSubscription\":\"ipp-route-92ba10-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-92ba10.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-92ba10/models/facebook/opt-125m","name":"ipp-route-92ba10","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-92ba10-sub","namespace":"ai-tenant-e2e-ipp-a-92ba10","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-92ba10/ipp-route-92ba10"}}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96397308-894d-4d7d-a340-8b77fd298095","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-92ba10/ipp-route-92ba10\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-92ba10/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-92ba10-sub"}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96397308-894d-4d7d-a340-8b77fd298095","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f32bfa23-c685-4f02-9828-a79c59837bf5","keyName":"e2e-ipp-92ba10","selected_subscription":"ipp-route-92ba10-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-92ba10/ipp-route-92ba10-sub@ai-tenant-e2e-ipp-a-92ba10/ipp-route-92ba10","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-92ba10/models/facebook/opt-125m","name":"ipp-route-92ba10","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-92ba10-sub","namespace":"ai-tenant-e2e-ipp-a-92ba10","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-92ba10/ipp-route-92ba10"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96397308-894d-4d7d-a340-8b77fd298095","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:40:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96397308-894d-4d7d-a340-8b77fd298095","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b87c3b4b30ea462e7d223ded00cbf29361ebe9ca177fc981e4e96551eebd9dc6"}
{"level":"info","ts":"2026-07-28T20:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a6f9db5e3e6167fe0f7033b28f358ee905dca528eb5b6fedd0d4451564e1793"}
{"level":"info","ts":"2026-07-28T20:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54312446743aae5cc8f29555449d2081fb3887adfe60c69e507f7bcf6dcf4017"}
{"level":"info","ts":"2026-07-28T20:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d99c68c3c43b8ef7da4ab0ab90fe67489aca8ab8d55319eb173d68d3c6f057c4"}
{"level":"info","ts":"2026-07-28T20:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b5b38ee7e8cc1f29ccd3538b43f0d7b5df3c286ce4a008203cdc92b006a5dac"}
{"level":"info","ts":"2026-07-28T20:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cb8b7b7b1ea5ca843cae67465a959a1802174fa30e75c638883715610d6ca5b"}
{"level":"info","ts":"2026-07-28T20:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f698ce589f3b61742ba92220c4d6875bb711bdd3ab173a1c5305f3b3aba57d92"}
{"level":"info","ts":"2026-07-28T20:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90644631871713bbbdfcc0fea7d838559b974949383e04ede128af0d9247e24"}
{"level":"info","ts":"2026-07-28T20:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ef8c809d3cb01f655468ce4d175d3b991eb5a3a7eff1197c9a852d7a93518f5"}
{"level":"info","ts":"2026-07-28T20:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18678f42b3664888e8ed4cd56607a1676f27f8d9ec36aeb9d1bae9fec2085b50"}
{"level":"info","ts":"2026-07-28T20:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c5f89f33c497cf5bb0294684e063b730ef08b196a6a991d1b53f19716f5525a"}
{"level":"info","ts":"2026-07-28T20:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62c30f65816f71b2a39b89022152dd1bf3326a03f875b91bc52a3678b98bb88b"}