--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"}
{"level":"error","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222"}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222"}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222"}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222"}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467"}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d"}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222"}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d"}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c27451d53a5a139a8d35817edff16b7ce06a6c9fc5576db4c9f399050f6917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b"}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c27451d53a5a139a8d35817edff16b7ce06a6c9fc5576db4c9f399050f6917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c27451d53a5a139a8d35817edff16b7ce06a6c9fc5576db4c9f399050f6917"}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c27451d53a5a139a8d35817edff16b7ce06a6c9fc5576db4c9f399050f6917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6c27451d53a5a139a8d35817edff16b7ce06a6c9fc5576db4c9f399050f6917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b"}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c27451d53a5a139a8d35817edff16b7ce06a6c9fc5576db4c9f399050f6917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6c27451d53a5a139a8d35817edff16b7ce06a6c9fc5576db4c9f399050f6917","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9"}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c27451d53a5a139a8d35817edff16b7ce06a6c9fc5576db4c9f399050f6917"}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b"}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9"}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9"}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9"}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9"}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890"}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890"}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890"}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc"}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"659e8597c307fea9d3fd887b8dfb304b00b1e7b3a6736021879743cfb076be32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"659e8597c307fea9d3fd887b8dfb304b00b1e7b3a6736021879743cfb076be32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/659e8597c307fea9d3fd887b8dfb304b00b1e7b3a6736021879743cfb076be32"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"659e8597c307fea9d3fd887b8dfb304b00b1e7b3a6736021879743cfb076be32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["659e8597c307fea9d3fd887b8dfb304b00b1e7b3a6736021879743cfb076be32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"659e8597c307fea9d3fd887b8dfb304b00b1e7b3a6736021879743cfb076be32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/659e8597c307fea9d3fd887b8dfb304b00b1e7b3a6736021879743cfb076be32"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"659e8597c307fea9d3fd887b8dfb304b00b1e7b3a6736021879743cfb076be32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"error","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90"}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82"}
{"level":"info","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450"}
{"level":"info","ts":"2026-07-10T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90"}
{"level":"info","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37718","PortSpecifier":{"PortValue":37718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50033c11-cf9f-418d-b058-3b157cebaddf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37718","PortSpecifier":{"PortValue":37718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645580,"nanos":972234454},"http":{"id":"50033c11-cf9f-418d-b058-3b157cebaddf","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50033c11-cf9f-418d-b058-3b157cebaddf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49908","PortSpecifier":{"PortValue":49908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49908","PortSpecifier":{"PortValue":49908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645581,"nanos":34773325},"http":{"id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/auth-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"845e15f0-45bb-4717-ae6a-41d65b1c8ab1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37730","PortSpecifier":{"PortValue":37730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"817b0fa4-7f31-483e-9123-108c3244e5e5","method":"GET","path":"/maas-api/v1/api-keys/9ba0f739-81a5-4a0c-9f2d-dabed5172676","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37730","PortSpecifier":{"PortValue":37730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645581,"nanos":94557238},"http":{"id":"817b0fa4-7f31-483e-9123-108c3244e5e5","method":"GET","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9ba0f739-81a5-4a0c-9f2d-dabed5172676",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9ba0f739-81a5-4a0c-9f2d-dabed5172676",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817b0fa4-7f31-483e-9123-108c3244e5e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49918","PortSpecifier":{"PortValue":49918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddbfde79-c774-47c8-b455-f844a82d612e","method":"GET","path":"/maas-api/v1/api-keys/b35a89d4-29df-4ef0-8a7e-964306e6acd0","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49918","PortSpecifier":{"PortValue":49918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645581,"nanos":133906767},"http":{"id":"ddbfde79-c774-47c8-b455-f844a82d612e","method":"GET","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b35a89d4-29df-4ef0-8a7e-964306e6acd0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b35a89d4-29df-4ef0-8a7e-964306e6acd0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/auth-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddbfde79-c774-47c8-b455-f844a82d612e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47188","PortSpecifier":{"PortValue":47188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47188","PortSpecifier":{"PortValue":47188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645605,"nanos":507994251},"http":{"id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f3ca952-6ef0-4f09-8d92-0891a872e21e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03a06a58-c07d-46f5-a515-617088467126","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03a06a58-c07d-46f5-a515-617088467126","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03a06a58-c07d-46f5-a515-617088467126","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645605,"nanos":545584720},"http":{"id":"03a06a58-c07d-46f5-a515-617088467126","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03a06a58-c07d-46f5-a515-617088467126","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03a06a58-c07d-46f5-a515-617088467126","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03a06a58-c07d-46f5-a515-617088467126","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03a06a58-c07d-46f5-a515-617088467126","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03a06a58-c07d-46f5-a515-617088467126","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03a06a58-c07d-46f5-a515-617088467126","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/auth-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03a06a58-c07d-46f5-a515-617088467126","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03a06a58-c07d-46f5-a515-617088467126","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03a06a58-c07d-46f5-a515-617088467126","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03a06a58-c07d-46f5-a515-617088467126","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03a06a58-c07d-46f5-a515-617088467126","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"852816f7-6c98-470d-98a3-e6d772283704","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47194","PortSpecifier":{"PortValue":47194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"852816f7-6c98-470d-98a3-e6d772283704","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"852816f7-6c98-470d-98a3-e6d772283704","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47194","PortSpecifier":{"PortValue":47194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645605,"nanos":588554586},"http":{"id":"852816f7-6c98-470d-98a3-e6d772283704","method":"GET","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10b9hWyQzmS7QzsBR_99hQhak6NLNMeyrZeHrfSS2nJbQYqTrFS1GXnFroRTU"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10b9hWyQzmS7QzsBR_99hQhak6NLNMeyrZeHrfSS2nJbQYqTrFS1GXnFroRTU\"}"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f045b901-1928-431f-818e-71ff23a1c976","keyName":"e2e-auth-iso-a-7f9ee6","subscription":"e2e-auth-iso-054d5a","tenant":"e2e-shared-a-48a750","userId":"f045b901-1928-431f-818e-71ff23a1c976","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"852816f7-6c98-470d-98a3-e6d772283704","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-054d5a"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"852816f7-6c98-470d-98a3-e6d772283704","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"852816f7-6c98-470d-98a3-e6d772283704","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:06:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"852816f7-6c98-470d-98a3-e6d772283704","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38378","PortSpecifier":{"PortValue":38378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38378","PortSpecifier":{"PortValue":38378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645622,"nanos":720215360},"http":{"id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6a21fd5-d2b7-4723-bdea-be1dffff25a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58826","PortSpecifier":{"PortValue":58826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58826","PortSpecifier":{"PortValue":58826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645622,"nanos":761741136},"http":{"id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/auth-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e5dc0e7-3152-407f-aa57-e3a356ec403f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58838","PortSpecifier":{"PortValue":58838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58838","PortSpecifier":{"PortValue":58838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645622,"nanos":804645252},"http":{"id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","method":"GET","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Z5T4YbtlKI2za0Ws_Tkm7pql7lah5JiK0PW9BCkfRyDy0M0BLzkKJlDPK8Di"}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Z5T4YbtlKI2za0Ws_Tkm7pql7lah5JiK0PW9BCkfRyDy0M0BLzkKJlDPK8Di\"}"}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T01:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2101dd-8e2c-42f1-bb01-4791cda7c624","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38640ba4-1b74-473c-a4a7-4950de06de74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645637,"nanos":941093401},"http":{"id":"38640ba4-1b74-473c-a4a7-4950de06de74","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38640ba4-1b74-473c-a4a7-4950de06de74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42606","PortSpecifier":{"PortValue":42606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42606","PortSpecifier":{"PortValue":42606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645637,"nanos":975121834},"http":{"id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/auth-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a25f18af-4823-4be5-ab4f-d1c2bb4a09cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55002","PortSpecifier":{"PortValue":55002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55002","PortSpecifier":{"PortValue":55002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645638,"nanos":24266431},"http":{"id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"489938bd-3ace-45ba-bf99-d1c67f31f7f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"390e4bed-5eb3-4509-be29-a628d177833b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42614","PortSpecifier":{"PortValue":42614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"390e4bed-5eb3-4509-be29-a628d177833b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"390e4bed-5eb3-4509-be29-a628d177833b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42614","PortSpecifier":{"PortValue":42614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645638,"nanos":65111122},"http":{"id":"390e4bed-5eb3-4509-be29-a628d177833b","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"390e4bed-5eb3-4509-be29-a628d177833b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"390e4bed-5eb3-4509-be29-a628d177833b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"390e4bed-5eb3-4509-be29-a628d177833b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390e4bed-5eb3-4509-be29-a628d177833b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390e4bed-5eb3-4509-be29-a628d177833b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390e4bed-5eb3-4509-be29-a628d177833b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/auth-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"390e4bed-5eb3-4509-be29-a628d177833b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390e4bed-5eb3-4509-be29-a628d177833b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390e4bed-5eb3-4509-be29-a628d177833b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"390e4bed-5eb3-4509-be29-a628d177833b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"390e4bed-5eb3-4509-be29-a628d177833b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45936","PortSpecifier":{"PortValue":45936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45936","PortSpecifier":{"PortValue":45936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645651,"nanos":848244795},"http":{"id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad54ac89-c2b3-479c-bbb9-067dc1521423","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40082","PortSpecifier":{"PortValue":40082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40082","PortSpecifier":{"PortValue":40082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645651,"nanos":886103784},"http":{"id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/auth-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75e0c31b-8012-4fdf-96f8-540143d2aef6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40096","PortSpecifier":{"PortValue":40096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","method":"GET","path":"/maas-api/v1/api-keys/c1e15046-9961-45aa-a59e-c7a469c3cf70","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40096","PortSpecifier":{"PortValue":40096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645651,"nanos":945576556},"http":{"id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","method":"GET","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c1e15046-9961-45aa-a59e-c7a469c3cf70",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c1e15046-9961-45aa-a59e-c7a469c3cf70",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/auth-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae3a67fd-5187-4ef6-b94f-6daf360f92c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45946","PortSpecifier":{"PortValue":45946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f012649c-de8d-453e-9661-d5bfb1061d19","method":"GET","path":"/maas-api/v1/api-keys/c1e15046-9961-45aa-a59e-c7a469c3cf70","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45946","PortSpecifier":{"PortValue":45946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645651,"nanos":977216296},"http":{"id":"f012649c-de8d-453e-9661-d5bfb1061d19","method":"GET","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c1e15046-9961-45aa-a59e-c7a469c3cf70",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c1e15046-9961-45aa-a59e-c7a469c3cf70",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f012649c-de8d-453e-9661-d5bfb1061d19","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59582","PortSpecifier":{"PortValue":59582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4db1de2-82c9-4d42-a97e-09676a92290e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59582","PortSpecifier":{"PortValue":59582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645666,"nanos":986693718},"http":{"id":"f4db1de2-82c9-4d42-a97e-09676a92290e","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4db1de2-82c9-4d42-a97e-09676a92290e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51618","PortSpecifier":{"PortValue":51618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51618","PortSpecifier":{"PortValue":51618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645667,"nanos":32776807},"http":{"id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/auth-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d8e4ef5-55c9-4277-83ed-28fa83b5e962","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59594","PortSpecifier":{"PortValue":59594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59594","PortSpecifier":{"PortValue":59594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645667,"nanos":72975937},"http":{"id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zRWdLeInrMqcufQD_7Ihw8gwbATjMiv64aYCRVWnUWeM7VC74Hiw4l34fRGv"}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zRWdLeInrMqcufQD_7Ihw8gwbATjMiv64aYCRVWnUWeM7VC74Hiw4l34fRGv\"}"}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2d23f5cb-c3a0-4d7d-a779-4113acfcc7d0","keyName":"e2e-auth-iso-a-7f2d73","subscription":"e2e-auth-iso-1e8989","tenant":"e2e-shared-a-48a750","userId":"2d23f5cb-c3a0-4d7d-a779-4113acfcc7d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/auth-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1e8989"}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:07:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fde5a1dc-334f-4f89-9cd0-3036470e61b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:07:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf56bd7c8f1f1fdaf497a740ca54b05d14fa3fe0a29804a5d8f414b3d1203467"}
{"level":"info","ts":"2026-07-10T01:07:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcd6ca7cab8424b6508fbf1a3ec1f5a5039299c36fda3c8b3e60297127a9ae90"}
{"level":"info","ts":"2026-07-10T01:07:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5d974c3eba74bf350374b2bf14f1f4628226faa69106d1ab51661a105228222"}
{"level":"info","ts":"2026-07-10T01:07:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5bf51942253bf564dea1960078ea9cd5b794b904e38252ff827a32db160a40"}
{"level":"info","ts":"2026-07-10T01:07:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b879637747add6eb7a6cf8f2aa6415bd3a624893bc7972e8ef82bfb2506f24d"}
{"level":"info","ts":"2026-07-10T01:07:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27f5a9efd2e9aea7c3c8be993dbd9e24b40689cb20a3211673d4918836a604d6"}
{"level":"info","ts":"2026-07-10T01:07:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc6f89b7f08d50f54a03c21f4d129fc2ff505f5d282918f1990f33402afa08d9"}
{"level":"info","ts":"2026-07-10T01:07:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e920f591658eb2a078b1e439614574f63971f51fd187dd7eadf7ccdc074cacaa"}
{"level":"info","ts":"2026-07-10T01:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fbe7411366cba4d33ee1b3afbecc819780e0142fcf716e1d2f431094e98eb82"}
{"level":"info","ts":"2026-07-10T01:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d16d517be5ab968f1c2234fd82662d8d58033f95ae7ab90e11cddb31ec3f890"}
{"level":"info","ts":"2026-07-10T01:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/659e8597c307fea9d3fd887b8dfb304b00b1e7b3a6736021879743cfb076be32"}
{"level":"info","ts":"2026-07-10T01:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6c27451d53a5a139a8d35817edff16b7ce06a6c9fc5576db4c9f399050f6917"}
{"level":"info","ts":"2026-07-10T01:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4339d96363c704cfb78317ce4ee46ac999bf60b06cec166151d1dac8b9d1fdb"}
{"level":"info","ts":"2026-07-10T01:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10773dedbaae02a95810be55ba42d334358cfe41e4f0657b0dfa61c5eb8a2450"}
{"level":"info","ts":"2026-07-10T01:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50c71227827b87d35567b4173e025ae0c834b67778a82e376411ba7786e9479b"}
{"level":"info","ts":"2026-07-10T01:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4968e08b4dfcf91b558dada5bd4ea0f5acd9f4d34541b6c939b1921f8f0e34cc"}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c"}
{"level":"error","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9"}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c"}
{"level":"debug","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"error","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"}
{"level":"info","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55"}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55"}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e72ce7fd324c2b552c69ddd6423ca32999075ba56cea40c7a66a8d27004a37"}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55"}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e72ce7fd324c2b552c69ddd6423ca32999075ba56cea40c7a66a8d27004a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54e72ce7fd324c2b552c69ddd6423ca32999075ba56cea40c7a66a8d27004a37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e72ce7fd324c2b552c69ddd6423ca32999075ba56cea40c7a66a8d27004a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e72ce7fd324c2b552c69ddd6423ca32999075ba56cea40c7a66a8d27004a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e72ce7fd324c2b552c69ddd6423ca32999075ba56cea40c7a66a8d27004a37"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8"}
{"level":"info","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a"}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55"}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"error","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9"}
{"level":"error","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d"}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e72ce7fd324c2b552c69ddd6423ca32999075ba56cea40c7a66a8d27004a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e72ce7fd324c2b552c69ddd6423ca32999075ba56cea40c7a66a8d27004a37"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6"}
{"level":"debug","ts":"2026-07-10T01:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9"}
{"level":"info","ts":"2026-07-10T01:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703"}
{"level":"info","ts":"2026-07-10T01:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"info","ts":"2026-07-10T01:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"}
{"level":"info","ts":"2026-07-10T01:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"info","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52790","PortSpecifier":{"PortValue":52790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52790","PortSpecifier":{"PortValue":52790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645743,"nanos":237475293},"http":{"id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/sub-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1546eb9a-d74e-4995-b9fe-255b4cc4a946","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549785ad-204b-448c-879e-41ec76255782","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60038","PortSpecifier":{"PortValue":60038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"549785ad-204b-448c-879e-41ec76255782","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549785ad-204b-448c-879e-41ec76255782","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60038","PortSpecifier":{"PortValue":60038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645743,"nanos":284459427},"http":{"id":"549785ad-204b-448c-879e-41ec76255782","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"549785ad-204b-448c-879e-41ec76255782","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"549785ad-204b-448c-879e-41ec76255782","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"549785ad-204b-448c-879e-41ec76255782","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549785ad-204b-448c-879e-41ec76255782","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549785ad-204b-448c-879e-41ec76255782","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549785ad-204b-448c-879e-41ec76255782","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/sub-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"549785ad-204b-448c-879e-41ec76255782","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549785ad-204b-448c-879e-41ec76255782","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549785ad-204b-448c-879e-41ec76255782","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549785ad-204b-448c-879e-41ec76255782","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549785ad-204b-448c-879e-41ec76255782","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0585defc-6b76-4851-977d-240859e548db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52804","PortSpecifier":{"PortValue":52804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0585defc-6b76-4851-977d-240859e548db","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0585defc-6b76-4851-977d-240859e548db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52804","PortSpecifier":{"PortValue":52804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645743,"nanos":326103757},"http":{"id":"0585defc-6b76-4851-977d-240859e548db","method":"GET","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0585defc-6b76-4851-977d-240859e548db","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t59XMdGLX2jn15ks_3E1WjoJNxKMuoCj7quO0y8yZRy5uCvmavKXyG3psYEU"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0585defc-6b76-4851-977d-240859e548db","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t59XMdGLX2jn15ks_3E1WjoJNxKMuoCj7quO0y8yZRy5uCvmavKXyG3psYEU\"}"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0585defc-6b76-4851-977d-240859e548db","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2d322d9d-fbfd-41ba-9383-94998539bb16","keyName":"e2e-sub-iso-7e4aef","subscription":"e2e-a-only-321bc4","tenant":"e2e-shared-a-48a750","userId":"2d322d9d-fbfd-41ba-9383-94998539bb16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0585defc-6b76-4851-977d-240859e548db","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0585defc-6b76-4851-977d-240859e548db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0585defc-6b76-4851-977d-240859e548db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0585defc-6b76-4851-977d-240859e548db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/sub-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0585defc-6b76-4851-977d-240859e548db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0585defc-6b76-4851-977d-240859e548db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0585defc-6b76-4851-977d-240859e548db","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-321bc4"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0585defc-6b76-4851-977d-240859e548db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0585defc-6b76-4851-977d-240859e548db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0585defc-6b76-4851-977d-240859e548db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60042","PortSpecifier":{"PortValue":60042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60042","PortSpecifier":{"PortValue":60042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645743,"nanos":372252088},"http":{"id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","method":"GET","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-K0sZGwrFckkGIxTk_ITywwTb88e09qSAxFXUUqTGIuv7ymNMXlSOQSjKVs0I"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-K0sZGwrFckkGIxTk_ITywwTb88e09qSAxFXUUqTGIuv7ymNMXlSOQSjKVs0I\"}"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"69e410dd-7035-423d-afc7-ff88d101715f","keyName":"e2e-sub-iso-b763e6","subscription":"e2e-b-only-321bc4","tenant":"e2e-shared-b-aaea96","userId":"69e410dd-7035-423d-afc7-ff88d101715f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/sub-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-321bc4"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0543c23b-57d3-4ae7-ae62-1b1c79e995c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645753,"nanos":369373205},"http":{"id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/sub-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8ad71a1-7885-4ce6-b6b6-c63559d60c15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46378","PortSpecifier":{"PortValue":46378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46378","PortSpecifier":{"PortValue":46378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645753,"nanos":419164397},"http":{"id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/sub-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a3fbce4-49be-4e4b-bebf-34462ab89dbc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45204","PortSpecifier":{"PortValue":45204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff419aa8-a9c2-493b-8297-c4778185fac5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45204","PortSpecifier":{"PortValue":45204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645753,"nanos":460346959},"http":{"id":"ff419aa8-a9c2-493b-8297-c4778185fac5","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r1OWMoi8iWQcy2SE_CIxtItLpuyix8OGTMqmD3NHowPLvFQlUXhuPxAHaUzA"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r1OWMoi8iWQcy2SE_CIxtItLpuyix8OGTMqmD3NHowPLvFQlUXhuPxAHaUzA\"}"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a50f580-3006-45a8-94af-474ce1341467","keyName":"e2e-sub-iso-322d5e","subscription":"e2e-shared-sub-5861fe","tenant":"e2e-shared-a-48a750","userId":"7a50f580-3006-45a8-94af-474ce1341467","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/sub-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5861fe"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff419aa8-a9c2-493b-8297-c4778185fac5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46390","PortSpecifier":{"PortValue":46390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea36e0dd-b710-4a54-b887-88e828f7746f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46390","PortSpecifier":{"PortValue":46390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645753,"nanos":493002371},"http":{"id":"ea36e0dd-b710-4a54-b887-88e828f7746f","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lRFyjRcnfrheI0TU_Rhk3tdTQJ6fNRDmSXK8IV6I3DSKHSS6pFTnjc8uJ4FM"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lRFyjRcnfrheI0TU_Rhk3tdTQJ6fNRDmSXK8IV6I3DSKHSS6pFTnjc8uJ4FM\"}"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0b0783d4-152e-48c1-9b5d-ad647404f3cb","keyName":"e2e-sub-iso-e7b521","subscription":"e2e-shared-sub-5861fe","tenant":"e2e-shared-b-aaea96","userId":"0b0783d4-152e-48c1-9b5d-ad647404f3cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/sub-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5861fe"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:09:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea36e0dd-b710-4a54-b887-88e828f7746f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:09:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1fa8f56f16ce8c55eb0ae3c87b488153101efd8f6a477b6fdd9899a0810fc95"}
{"level":"info","ts":"2026-07-10T01:09:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7e02e78d776eee23513ec90fde8da8e2ce8f33e473ba0224974cf98d1c68703"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/811d653c70cea34e05d44fe27cd11f5087ef35ede3366a00e62fdada1502d105"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3df5c8abec5c0c5366bb5a833416b9e1ed705f5dafa61ad0ee8d5168f52ea68c"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54e72ce7fd324c2b552c69ddd6423ca32999075ba56cea40c7a66a8d27004a37"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d362994711f469bddb2b3c3cdfa5073d403cad4fb82afac58b6397433e0d90b6"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5df06656047826f004bc65d74b0f36f4804c70f295a4ef27fcbe83e4902b2028"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a26f124f1ee443991ad7ffa87c2a66c168a6fb4d3ddb9d8c728629d71ec7813"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92198a5cb125925c115c26791300b7a4e5867b7178fa8a11b93367cf61ce5ce3"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/273bf8456286b0fb146116251895112f77fd8695489b3cee4f6c3443a55f9e6d"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4eebae62fdd5b287da0fed514ba716629e5ed8fc140d7078b4a0b1dc70c0b55"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffdf041efce356b13b53923e3b53d0878ad68abba2b7e9b38cd1293f7e526ee8"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0af2be8583a6838ce3e2505d799fc54f04df5f889b034b96047cbd1f428e1fc9"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ec38a264790249932728754bf8fa05f0c780c053be2e488760a4a91cbb3d44a"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7a15295ea2a8643f53f103c0a768da2c1de35d9f65d569fe7f63f54732d7ca9"}
{"level":"info","ts":"2026-07-10T01:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1de082dfae3af5d4eeb93d89f9e8185c26478e8b5b05920dfd1f54cc3b0ebb2"}
{"level":"debug","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"info","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"info","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2"}
{"level":"debug","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"}
{"level":"info","ts":"2026-07-10T01:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43"}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43"}
{"level":"info","ts":"2026-07-10T01:09:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763"}
{"level":"error","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795"}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795"}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"}
{"level":"info","ts":"2026-07-10T01:10:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd"}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T01:10:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"}
{"level":"info","ts":"2026-07-10T01:10:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2"}
{"level":"info","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46318","PortSpecifier":{"PortValue":46318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46318","PortSpecifier":{"PortValue":46318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645808,"nanos":999738482},"http":{"id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08f9f752-2187-48eb-9ea6-b82bc27a005a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddc233aa-a023-4262-9789-09eb8e955398","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddc233aa-a023-4262-9789-09eb8e955398","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddc233aa-a023-4262-9789-09eb8e955398","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645809,"nanos":42193188},"http":{"id":"ddc233aa-a023-4262-9789-09eb8e955398","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ddc233aa-a023-4262-9789-09eb8e955398","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddc233aa-a023-4262-9789-09eb8e955398","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddc233aa-a023-4262-9789-09eb8e955398","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc233aa-a023-4262-9789-09eb8e955398","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc233aa-a023-4262-9789-09eb8e955398","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc233aa-a023-4262-9789-09eb8e955398","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/rate-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ddc233aa-a023-4262-9789-09eb8e955398","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddc233aa-a023-4262-9789-09eb8e955398","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddc233aa-a023-4262-9789-09eb8e955398","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddc233aa-a023-4262-9789-09eb8e955398","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddc233aa-a023-4262-9789-09eb8e955398","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46330","PortSpecifier":{"PortValue":46330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46330","PortSpecifier":{"PortValue":46330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645809,"nanos":102329561},"http":{"id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MzR0uTYoWBhmoIoR_r1S0TLRrjjZCVKSxVMqPfERNzoAxhUvUVWXLwfYCKu8"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MzR0uTYoWBhmoIoR_r1S0TLRrjjZCVKSxVMqPfERNzoAxhUvUVWXLwfYCKu8\"}"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd74a006-a660-4187-8e6b-f77ab832e0d9","keyName":"e2e-rate-a-9d118b","subscription":"e2e-rate-iso-a-9d118b","tenant":"e2e-shared-a-48a750","userId":"dd74a006-a660-4187-8e6b-f77ab832e0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-9d118b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d118b","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9d118b"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd74a006-a660-4187-8e6b-f77ab832e0d9","keyName":"e2e-rate-a-9d118b","selected_subscription":"e2e-rate-iso-a-9d118b","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-9d118b@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d118b","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d92cdcd-3e3a-4022-b005-c890574ff6e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46346","PortSpecifier":{"PortValue":46346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15491ac8-f973-47d2-8dc6-16c562e793fd","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46346","PortSpecifier":{"PortValue":46346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645810,"nanos":155500042},"http":{"id":"15491ac8-f973-47d2-8dc6-16c562e793fd","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MzR0uTYoWBhmoIoR_r1S0TLRrjjZCVKSxVMqPfERNzoAxhUvUVWXLwfYCKu8"}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MzR0uTYoWBhmoIoR_r1S0TLRrjjZCVKSxVMqPfERNzoAxhUvUVWXLwfYCKu8\"}"}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd74a006-a660-4187-8e6b-f77ab832e0d9","keyName":"e2e-rate-a-9d118b","subscription":"e2e-rate-iso-a-9d118b","tenant":"e2e-shared-a-48a750","userId":"dd74a006-a660-4187-8e6b-f77ab832e0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-9d118b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d118b","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9d118b"}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd74a006-a660-4187-8e6b-f77ab832e0d9","keyName":"e2e-rate-a-9d118b","selected_subscription":"e2e-rate-iso-a-9d118b","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-9d118b@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d118b","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15491ac8-f973-47d2-8dc6-16c562e793fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"195d5450-b20c-40af-a33e-9e4923745877","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46350","PortSpecifier":{"PortValue":46350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"195d5450-b20c-40af-a33e-9e4923745877","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"195d5450-b20c-40af-a33e-9e4923745877","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46350","PortSpecifier":{"PortValue":46350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645811,"nanos":197197848},"http":{"id":"195d5450-b20c-40af-a33e-9e4923745877","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MzR0uTYoWBhmoIoR_r1S0TLRrjjZCVKSxVMqPfERNzoAxhUvUVWXLwfYCKu8"}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MzR0uTYoWBhmoIoR_r1S0TLRrjjZCVKSxVMqPfERNzoAxhUvUVWXLwfYCKu8\"}"}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd74a006-a660-4187-8e6b-f77ab832e0d9","keyName":"e2e-rate-a-9d118b","subscription":"e2e-rate-iso-a-9d118b","tenant":"e2e-shared-a-48a750","userId":"dd74a006-a660-4187-8e6b-f77ab832e0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-9d118b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d118b","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"195d5450-b20c-40af-a33e-9e4923745877","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9d118b"}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"195d5450-b20c-40af-a33e-9e4923745877","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd74a006-a660-4187-8e6b-f77ab832e0d9","keyName":"e2e-rate-a-9d118b","selected_subscription":"e2e-rate-iso-a-9d118b","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-9d118b@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d118b","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"195d5450-b20c-40af-a33e-9e4923745877","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"195d5450-b20c-40af-a33e-9e4923745877","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46062","PortSpecifier":{"PortValue":46062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46062","PortSpecifier":{"PortValue":46062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645819,"nanos":918843585},"http":{"id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e5484ad-ec6f-4e3b-8ead-4d290c4dd2a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38840","PortSpecifier":{"PortValue":38840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38840","PortSpecifier":{"PortValue":38840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645819,"nanos":965223956},"http":{"id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"]}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a289e15a3969"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=36226885-432c-4283-a5db-7cbbb568e24a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c7d2420-3036-4eab-a3f2-9ea6ffc6e5e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/rate-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1495579-401a-4dcb-b7a1-d15cd0c8a96c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"515724e9-3454-4830-8242-37241d48bbe4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46068","PortSpecifier":{"PortValue":46068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"515724e9-3454-4830-8242-37241d48bbe4","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"515724e9-3454-4830-8242-37241d48bbe4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46068","PortSpecifier":{"PortValue":46068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645820,"nanos":2095246},"http":{"id":"515724e9-3454-4830-8242-37241d48bbe4","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY"}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY\"}"}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","subscription":"e2e-rate-iso-a-8c8f9e","tenant":"e2e-shared-a-48a750","userId":"d944989f-66ad-4904-97df-717f51eb5322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"515724e9-3454-4830-8242-37241d48bbe4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515724e9-3454-4830-8242-37241d48bbe4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","selected_subscription":"e2e-rate-iso-a-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-8c8f9e@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"515724e9-3454-4830-8242-37241d48bbe4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"515724e9-3454-4830-8242-37241d48bbe4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46080","PortSpecifier":{"PortValue":46080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46080","PortSpecifier":{"PortValue":46080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645821,"nanos":42601664},"http":{"id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY"}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY\"}"}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","subscription":"e2e-rate-iso-a-8c8f9e","tenant":"e2e-shared-a-48a750","userId":"d944989f-66ad-4904-97df-717f51eb5322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","selected_subscription":"e2e-rate-iso-a-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-8c8f9e@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4b613ee-52fa-41ea-bec7-edbb04235c3d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46092","PortSpecifier":{"PortValue":46092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46092","PortSpecifier":{"PortValue":46092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645822,"nanos":86663090},"http":{"id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY"}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY\"}"}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","subscription":"e2e-rate-iso-a-8c8f9e","tenant":"e2e-shared-a-48a750","userId":"d944989f-66ad-4904-97df-717f51eb5322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","selected_subscription":"e2e-rate-iso-a-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-8c8f9e@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"237f0733-2b59-40d5-ba25-c7bf1aa68209","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46108","PortSpecifier":{"PortValue":46108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46108","PortSpecifier":{"PortValue":46108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645823,"nanos":154001298},"http":{"id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY"}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY\"}"}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","subscription":"e2e-rate-iso-a-8c8f9e","tenant":"e2e-shared-a-48a750","userId":"d944989f-66ad-4904-97df-717f51eb5322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","selected_subscription":"e2e-rate-iso-a-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-8c8f9e@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7165811-a7d1-46a2-8db6-0246da74c8d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46120","PortSpecifier":{"PortValue":46120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c60051f7-0c94-4870-927e-5871312fe6c7","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46120","PortSpecifier":{"PortValue":46120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645824,"nanos":198395113},"http":{"id":"c60051f7-0c94-4870-927e-5871312fe6c7","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY"}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY\"}"}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","subscription":"e2e-rate-iso-a-8c8f9e","tenant":"e2e-shared-a-48a750","userId":"d944989f-66ad-4904-97df-717f51eb5322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","selected_subscription":"e2e-rate-iso-a-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-8c8f9e@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c60051f7-0c94-4870-927e-5871312fe6c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46124","PortSpecifier":{"PortValue":46124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46124","PortSpecifier":{"PortValue":46124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645825,"nanos":235746314},"http":{"id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY"}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY\"}"}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","subscription":"e2e-rate-iso-a-8c8f9e","tenant":"e2e-shared-a-48a750","userId":"d944989f-66ad-4904-97df-717f51eb5322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","selected_subscription":"e2e-rate-iso-a-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-8c8f9e@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d0673d6-bb0f-4773-b0f7-490436b4ccf9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46134","PortSpecifier":{"PortValue":46134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46134","PortSpecifier":{"PortValue":46134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645826,"nanos":280025284},"http":{"id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY"}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY\"}"}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","subscription":"e2e-rate-iso-a-8c8f9e","tenant":"e2e-shared-a-48a750","userId":"d944989f-66ad-4904-97df-717f51eb5322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","selected_subscription":"e2e-rate-iso-a-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-8c8f9e@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2a50279-68fe-4a3d-8c71-9d435c4e2bda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46142","PortSpecifier":{"PortValue":46142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46142","PortSpecifier":{"PortValue":46142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645827,"nanos":322207939},"http":{"id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY"}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY\"}"}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","subscription":"e2e-rate-iso-a-8c8f9e","tenant":"e2e-shared-a-48a750","userId":"d944989f-66ad-4904-97df-717f51eb5322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","selected_subscription":"e2e-rate-iso-a-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-8c8f9e@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c944da63-02a3-4a8a-9e0b-1c2ffbea5652","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39046","PortSpecifier":{"PortValue":39046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","method":"POST","path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions","host":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39046","PortSpecifier":{"PortValue":39046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645828,"nanos":365993038},"http":{"id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","method":"POST","headers":{":authority":"e2e-shared-a-48a750.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y9hBbrzYVv8PQeOE_1XOPHY5sFwi28J0OW4HcX6iKJtdSl7E1GOtw10hhPcY\"}"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","subscription":"e2e-rate-iso-a-8c8f9e","tenant":"e2e-shared-a-48a750","userId":"d944989f-66ad-4904-97df-717f51eb5322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\",\"requestedSubscription\":\"e2e-rate-iso-a-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48a750.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d944989f-66ad-4904-97df-717f51eb5322","keyName":"e2e-rate-a-8c8f9e","selected_subscription":"e2e-rate-iso-a-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-a-48a750/e2e-rate-iso-a-8c8f9e@ai-tenant-e2e-shared-a-48a750/rate-test-model-48a750","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48a750","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c8f9e","namespace":"ai-tenant-e2e-shared-a-48a750","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a09aa3c9-4867-47d8-83ab-49a14655abdc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53364","PortSpecifier":{"PortValue":53364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","method":"POST","path":"/ai-tenant-e2e-shared-b-aaea96/rate-test-model-aaea96/v1/completions","host":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53364","PortSpecifier":{"PortValue":53364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783645828,"nanos":404423692},"http":{"id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","method":"POST","headers":{":authority":"e2e-shared-b-aaea96.apps.d127fce0-8432-42c9-98db-a289e15a3969.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-aaea96/rate-test-model-aaea96/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IRNKkmZt20xRsOo_39Vo3IIrNMoOJvHJqyKATHSAEBlILiag6Yxyk8EHHL2"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IRNKkmZt20xRsOo_39Vo3IIrNMoOJvHJqyKATHSAEBlILiag6Yxyk8EHHL2\"}"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cbc79a0c-9a63-450d-bd25-edfaf03680ba","keyName":"e2e-rate-b-8c8f9e","subscription":"e2e-rate-iso-b-8c8f9e","tenant":"e2e-shared-b-aaea96","userId":"cbc79a0c-9a63-450d-bd25-edfaf03680ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-aaea96/rate-test-model-aaea96\",\"requestedSubscription\":\"e2e-rate-iso-b-8c8f9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-aaea96.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aaea96","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8c8f9e","namespace":"ai-tenant-e2e-shared-b-aaea96","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-aaea96/rate-test-model-aaea96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8c8f9e"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cbc79a0c-9a63-450d-bd25-edfaf03680ba","keyName":"e2e-rate-b-8c8f9e","selected_subscription":"e2e-rate-iso-b-8c8f9e","selected_subscription_key":"ai-tenant-e2e-shared-b-aaea96/e2e-rate-iso-b-8c8f9e@ai-tenant-e2e-shared-b-aaea96/rate-test-model-aaea96","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aaea96","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8c8f9e","namespace":"ai-tenant-e2e-shared-b-aaea96","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T01:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba8a79d3-23e9-4879-be82-9029fd1d99de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T01:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60ae273f61a34d460c8d59b9e73181fa61307e6d2a9085dfc5edd591fb3b5e43"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5473aef10213d99e5f86835f1fd6d8d0aceb746d1ba1fb2eb0a3e5fe0ef8fcb9"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a862620be8db0db5d88ca76e1f4c8f7444d5bd78c746f596ef5942091ea350be"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cf8aa3946b6bdb9a6e44b1bf1f3f7f09b4a9dddde92f92906e0d1cc276a9946"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43228731249a2a9c9372e8bdd2ff208267c86ef8b47de9ebdbc81d9aef76c974"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97a4e61f20e5aebf04de048e4600a3571a6f728fe9620547ec42d784d07f444f"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5ef5598d99d2b9cabb5762194bcc44ddbcab37acc43068955f6fedf2aebb358"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a4665e058b9131f7c7df569d4f5747c3906977e5fa7a343843fd986337a35bb"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1147a5f356b2e8942706be869b3dbf30f105a01a427f61fca6029e9ef24ea3d2"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e102322ed0644628b170615e03b459c143b490af94fae1988207724154abba3f"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db1c45057f0763920e7820baa6a7fdffbfc3795430095515cc48146a31a4be87"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/852c26ded8b083af7cc9a9983a2aa2c8f6caa04ee3ab8636fc9bcc0b3999d763"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b671be30c246afe3c3edf155465716ddb19fff9895752d423abd2ab8d5ce1dd"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43c74b091ef6f5e821ebe30d6f199a8641032551eca7b84d8b5e33d16c57fdae"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/904343739b416f606da186dd44c99ed20303e35a99811365e1c42efd44a9799d"}
{"level":"info","ts":"2026-07-10T01:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46bf453cf17eb4211093215eb72a0d75fc9e78b80f98f269beab6936d767f795"}
{"level":"info","ts":"2026-07-10T01:10:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06e0bae7917e6993e2a15b17003f5e2e20c8a3e09d743a08b5e58fb67ef85a3d"}
{"level":"info","ts":"2026-07-10T01:10:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd3b3072b97c22d28eb4b53c0a08bbdcee75257b8e56df159fa9d2fea14f34a7"}
{"level":"info","ts":"2026-07-10T01:10:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fb10e734ab29e0abf8eb5c74077bbd25aaab7da737bfcfcb32ebd35c60867f9"}
{"level":"info","ts":"2026-07-10T01:10:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ab7d7821e82a604fccdc9c269185d1bd3857bf26b7ab12a0f51ff47ad75f931"}
{"level":"info","ts":"2026-07-10T01:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70f6cb0685272d5b80d1591fb9876df0ea7d75ad14facf5cf54424606b1e2374"}
{"level":"info","ts":"2026-07-10T01:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dccc0b5ae7f3d4db812ae08495ba727bfac8b7d3c4b456c544e2000ebf121fa3"}
{"level":"info","ts":"2026-07-10T01:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62cb7c80dd89527f265b0c67eea1be157b6bd2969c60d85d15c97a1b36b217f8"}
{"level":"info","ts":"2026-07-10T01:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e46ac7a8254f12170d2a71159709dad4fd00aa35e6abe976922b59f66b45108"}