--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c"}
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94cb06f9357505c917cf287420967bf9d136b0690405d3cccf947ef4fa58ed25"}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c"}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c"}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c"}
{"level":"info","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9fe9cb1f32586d9ba9168621499ec850d4301b8d01d440b333a7c680d42912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9fe9cb1f32586d9ba9168621499ec850d4301b8d01d440b333a7c680d42912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9fe9cb1f32586d9ba9168621499ec850d4301b8d01d440b333a7c680d42912"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9fe9cb1f32586d9ba9168621499ec850d4301b8d01d440b333a7c680d42912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a9fe9cb1f32586d9ba9168621499ec850d4301b8d01d440b333a7c680d42912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9fe9cb1f32586d9ba9168621499ec850d4301b8d01d440b333a7c680d42912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9fe9cb1f32586d9ba9168621499ec850d4301b8d01d440b333a7c680d42912"}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a9fe9cb1f32586d9ba9168621499ec850d4301b8d01d440b333a7c680d42912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed"}
{"level":"info","ts":"2026-07-09T14:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05"}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"error","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246"}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"error","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59524","PortSpecifier":{"PortValue":59524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"619880ee-3558-45cd-9dcb-f1a781b2c671","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59524","PortSpecifier":{"PortValue":59524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609050,"nanos":401226742},"http":{"id":"619880ee-3558-45cd-9dcb-f1a781b2c671","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"619880ee-3558-45cd-9dcb-f1a781b2c671","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36752","PortSpecifier":{"PortValue":36752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36752","PortSpecifier":{"PortValue":36752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609050,"nanos":464768505},"http":{"id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/auth-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ab1adae-a9e3-409e-95f3-60a7b14c5a35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59530","PortSpecifier":{"PortValue":59530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","method":"GET","path":"/maas-api/v1/api-keys/c92d61ce-98b7-4363-8033-280265e04d0c","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59530","PortSpecifier":{"PortValue":59530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609050,"nanos":531859744},"http":{"id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","method":"GET","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c92d61ce-98b7-4363-8033-280265e04d0c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c92d61ce-98b7-4363-8033-280265e04d0c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb9f0619-c7c1-44af-b89c-3e4728bc4464","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36766","PortSpecifier":{"PortValue":36766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"184885a7-6ff8-4cd8-9247-dea49af33d60","method":"GET","path":"/maas-api/v1/api-keys/0608bc93-5769-427b-83b6-419cc9ce0caa","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36766","PortSpecifier":{"PortValue":36766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609050,"nanos":570906632},"http":{"id":"184885a7-6ff8-4cd8-9247-dea49af33d60","method":"GET","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0608bc93-5769-427b-83b6-419cc9ce0caa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0608bc93-5769-427b-83b6-419cc9ce0caa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/auth-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:57:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"184885a7-6ff8-4cd8-9247-dea49af33d60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33696","PortSpecifier":{"PortValue":33696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d596897-e1f5-48d0-9fa5-312f00187582","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33696","PortSpecifier":{"PortValue":33696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609067,"nanos":861449278},"http":{"id":"9d596897-e1f5-48d0-9fa5-312f00187582","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d596897-e1f5-48d0-9fa5-312f00187582","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35162","PortSpecifier":{"PortValue":35162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dacf2546-05a3-4472-80a5-79fc282269eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35162","PortSpecifier":{"PortValue":35162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609067,"nanos":906861910},"http":{"id":"dacf2546-05a3-4472-80a5-79fc282269eb","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/auth-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dacf2546-05a3-4472-80a5-79fc282269eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"963c9153-4933-43a9-a77b-995dc38630b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33700","PortSpecifier":{"PortValue":33700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"963c9153-4933-43a9-a77b-995dc38630b8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"963c9153-4933-43a9-a77b-995dc38630b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33700","PortSpecifier":{"PortValue":33700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609067,"nanos":952044866},"http":{"id":"963c9153-4933-43a9-a77b-995dc38630b8","method":"GET","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-h0mlD0EA20ckdB8_5dBo3nYUVR7vVIgKGoihMIb1T7xIXGmifg1gS7C9rQM"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-h0mlD0EA20ckdB8_5dBo3nYUVR7vVIgKGoihMIb1T7xIXGmifg1gS7C9rQM\"}"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"366e5c1c-7e7d-44f2-b8df-99cc0214d33b","keyName":"e2e-auth-iso-a-29eb65","subscription":"e2e-auth-iso-4588d2","tenant":"e2e-shared-a-0d877f","userId":"366e5c1c-7e7d-44f2-b8df-99cc0214d33b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"963c9153-4933-43a9-a77b-995dc38630b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"963c9153-4933-43a9-a77b-995dc38630b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4588d2"}
{"level":"info","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"963c9153-4933-43a9-a77b-995dc38630b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"963c9153-4933-43a9-a77b-995dc38630b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51800","PortSpecifier":{"PortValue":51800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51800","PortSpecifier":{"PortValue":51800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609087,"nanos":325134396},"http":{"id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd932bb7-e085-4d18-abf4-94c1ca50bea1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41450","PortSpecifier":{"PortValue":41450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41450","PortSpecifier":{"PortValue":41450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609087,"nanos":372547012},"http":{"id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/auth-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed1a65f1-5932-46a5-9c7d-8c8a83acc642","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41456","PortSpecifier":{"PortValue":41456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41456","PortSpecifier":{"PortValue":41456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609087,"nanos":408197538},"http":{"id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","method":"GET","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-i5xO2dE1p1aAdFeq_TWz8x4SH5jCmqR06c0kELPktTWUhfQovDBBxCgUdGGM"}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-i5xO2dE1p1aAdFeq_TWz8x4SH5jCmqR06c0kELPktTWUhfQovDBBxCgUdGGM\"}"}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-09T14:58:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8e5c939-61ac-47ef-b5c6-8c93ef7e6003","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56864","PortSpecifier":{"PortValue":56864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b973cd21-20f2-4e25-99d2-8815e18f851f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56864","PortSpecifier":{"PortValue":56864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609106,"nanos":810060867},"http":{"id":"b973cd21-20f2-4e25-99d2-8815e18f851f","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b973cd21-20f2-4e25-99d2-8815e18f851f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57046","PortSpecifier":{"PortValue":57046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57046","PortSpecifier":{"PortValue":57046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609106,"nanos":851118833},"http":{"id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/auth-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d56a671a-8cee-4830-b0e7-a5c4d863e8da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56876","PortSpecifier":{"PortValue":56876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94b98f04-6654-4767-b895-491b38e5d8f7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56876","PortSpecifier":{"PortValue":56876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609106,"nanos":909855160},"http":{"id":"94b98f04-6654-4767-b895-491b38e5d8f7","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94b98f04-6654-4767-b895-491b38e5d8f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57050","PortSpecifier":{"PortValue":57050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b7f19d7-cc42-4025-8860-01cc16316da3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57050","PortSpecifier":{"PortValue":57050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609106,"nanos":946191549},"http":{"id":"4b7f19d7-cc42-4025-8860-01cc16316da3","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/auth-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b7f19d7-cc42-4025-8860-01cc16316da3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39132","PortSpecifier":{"PortValue":39132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94bf60aa-b039-9c07-932d-3c5442805f9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39132","PortSpecifier":{"PortValue":39132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609124,"nanos":137844118},"http":{"id":"94bf60aa-b039-9c07-932d-3c5442805f9f","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94bf60aa-b039-9c07-932d-3c5442805f9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56358","PortSpecifier":{"PortValue":56358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56358","PortSpecifier":{"PortValue":56358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609124,"nanos":178881525},"http":{"id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/auth-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfac6502-2af5-4bee-9ea1-6577ff6bd88e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56364","PortSpecifier":{"PortValue":56364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","method":"GET","path":"/maas-api/v1/api-keys/7509dac0-bdc3-4098-84e8-a6d634b4ce17","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56364","PortSpecifier":{"PortValue":56364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609124,"nanos":218497247},"http":{"id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","method":"GET","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7509dac0-bdc3-4098-84e8-a6d634b4ce17",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7509dac0-bdc3-4098-84e8-a6d634b4ce17",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/auth-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56950c1d-eb2e-4d64-a3df-c7aa627d40f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39148","PortSpecifier":{"PortValue":39148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","method":"GET","path":"/maas-api/v1/api-keys/7509dac0-bdc3-4098-84e8-a6d634b4ce17","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39148","PortSpecifier":{"PortValue":39148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609124,"nanos":252940416},"http":{"id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","method":"GET","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7509dac0-bdc3-4098-84e8-a6d634b4ce17",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7509dac0-bdc3-4098-84e8-a6d634b4ce17",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"447e2a30-3d23-424f-94e4-7c191ec9a08f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44238","PortSpecifier":{"PortValue":44238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44238","PortSpecifier":{"PortValue":44238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609143,"nanos":513467438},"http":{"id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd1220b-6e20-49b0-9fbd-e985fcae2cb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46000","PortSpecifier":{"PortValue":46000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46000","PortSpecifier":{"PortValue":46000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609143,"nanos":552595491},"http":{"id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/auth-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"807ce3f7-0003-40df-b1df-9d4ca18cc4ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44252","PortSpecifier":{"PortValue":44252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44252","PortSpecifier":{"PortValue":44252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609143,"nanos":584699538},"http":{"id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qwAk64iqAxqFczoR_ABv1UNb6A0OaIMWE2lJJFLo4kja01GBnuBM2zocTxUP"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qwAk64iqAxqFczoR_ABv1UNb6A0OaIMWE2lJJFLo4kja01GBnuBM2zocTxUP\"}"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d515e6e0-f25b-487d-b769-5483208c2b55","keyName":"e2e-auth-iso-a-64ad79","subscription":"e2e-auth-iso-571e04","tenant":"e2e-shared-a-0d877f","userId":"d515e6e0-f25b-487d-b769-5483208c2b55","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/auth-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-571e04"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T14:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a901f57-7cb8-4f8d-9f09-9f8a8fc270fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T14:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f29b78ec6f3899007bf06dcb9b817babace8af17ca8f9064b4939aa12d027e8c"}
{"level":"info","ts":"2026-07-09T14:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6b10d7c4381945017be26aa9a8962fb73df38ef2738f5cbd0137af019f2e6bc"}
{"level":"info","ts":"2026-07-09T14:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15572b708e1380f4ff6c6fe7606c812d9ba104649ff760f216a06fc7cec524ed"}
{"level":"info","ts":"2026-07-09T14:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/360711bdbb9176db887653a353059a54079b5f70797d2de22c34710bdb9a4e5d"}
{"level":"info","ts":"2026-07-09T14:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a9fe9cb1f32586d9ba9168621499ec850d4301b8d01d440b333a7c680d42912"}
{"level":"info","ts":"2026-07-09T14:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b112963eed935847c4e49fb2f61cecd42aed8914744691cd806cc1387469bd05"}
{"level":"info","ts":"2026-07-09T14:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35e15256b1cc25c516da64b7341ef8c028be7db74edb6ba59c394966d695f9fe"}
{"level":"info","ts":"2026-07-09T14:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/431bd70250013820e9124a3bc7cc9efa48aea19469e5dde162854a31d20f4fe8"}
{"level":"info","ts":"2026-07-09T14:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/081e3b0b55604c7da9c3f2ebf87affa3e7f496a745023cde7db913062dd14aa4"}
{"level":"info","ts":"2026-07-09T14:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2eaa0cf1d6be1d11949df238597070efd8356fb815d4d0de79c1a9ce81a88d30"}
{"level":"info","ts":"2026-07-09T14:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e26c4f4bc367d33ac958e87124236682dd479e4cebaa33816beff85e97788499"}
{"level":"info","ts":"2026-07-09T14:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f727ca192d75196a667231ff69ec153bdd9647a658a5ceb48c1be362cc281511"}
{"level":"info","ts":"2026-07-09T14:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af33eca8ab72d4353c3746d05c0eaced347d2ec36eba2308e9180f09e11065a9"}
{"level":"info","ts":"2026-07-09T14:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b810061c3c275b8aecc8fb1b90c9fa8ccbf097847491814aaa0dac0f9479246"}
{"level":"info","ts":"2026-07-09T14:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e6361aac6d71249098088e461cd2c568fe03f11875d0e25c7856ae3fdbb541d"}
{"level":"info","ts":"2026-07-09T14:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bad101ce5c304c0844b746c27ce54f2380b3b3713c09405475a07e2b187eaff"}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986"}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986"}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986"}
{"level":"error","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"error","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426"}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426"}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426"}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16"}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83"}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd"}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670"}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"info","ts":"2026-07-09T14:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670"}
{"level":"debug","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5"}
{"level":"debug","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5"}
{"level":"debug","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"error","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3"}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T14:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T14:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d"}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"debug","ts":"2026-07-09T15:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"error","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94cb06f9357505c917cf287420967bf9d136b0690405d3cccf947ef4fa58ed25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd"}
{"level":"debug","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6f46892be05920960366a750f3d311c41c1fb821b974ec05d8b10a565227327","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94cb06f9357505c917cf287420967bf9d136b0690405d3cccf947ef4fa58ed25"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16"}
{"level":"info","ts":"2026-07-09T15:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6f46892be05920960366a750f3d311c41c1fb821b974ec05d8b10a565227327"}
{"level":"info","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36384","PortSpecifier":{"PortValue":36384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36384","PortSpecifier":{"PortValue":36384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609204,"nanos":518061616},"http":{"id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/sub-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b827481-36ba-4e4c-9c3d-c6daddd8ab1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33106","PortSpecifier":{"PortValue":33106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33106","PortSpecifier":{"PortValue":33106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609204,"nanos":562055049},"http":{"id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/sub-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f46295-9c1b-4f92-8cd0-c7ea9c2688b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36390","PortSpecifier":{"PortValue":36390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36390","PortSpecifier":{"PortValue":36390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609204,"nanos":607303172},"http":{"id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","method":"GET","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aIxoDPKNWpqMzAWq_4QxmRa9yA2TKQnpPTiHjqtXiceYmREHajcMRrWpDS30"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aIxoDPKNWpqMzAWq_4QxmRa9yA2TKQnpPTiHjqtXiceYmREHajcMRrWpDS30\"}"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c17c78be-608c-4362-bedd-ed44308be168","keyName":"e2e-sub-iso-2ed33b","subscription":"e2e-a-only-e63b98","tenant":"e2e-shared-a-0d877f","userId":"c17c78be-608c-4362-bedd-ed44308be168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/sub-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e63b98"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"878eadd1-fc4e-4ae2-b8a5-2921b65d4407","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33122","PortSpecifier":{"PortValue":33122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33122","PortSpecifier":{"PortValue":33122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609204,"nanos":654011461},"http":{"id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","method":"GET","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1P2zPU8igdWOzdYyr_20zLkOFPu14vQ0vzYJIGBWfFJTKaQJd7Lysh4L1QhJa"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1P2zPU8igdWOzdYyr_20zLkOFPu14vQ0vzYJIGBWfFJTKaQJd7Lysh4L1QhJa\"}"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bc75bb40-f5f5-434c-a24c-7bdcc66cf25d","keyName":"e2e-sub-iso-1e2262","subscription":"e2e-b-only-e63b98","tenant":"e2e-shared-b-d74e21","userId":"bc75bb40-f5f5-434c-a24c-7bdcc66cf25d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/sub-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e63b98"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97afc4d1-ee96-47b9-8ed9-bd795b4bff04","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36400","PortSpecifier":{"PortValue":36400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36400","PortSpecifier":{"PortValue":36400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609212,"nanos":842577914},"http":{"id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/sub-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10fb8777-09e2-4b37-b1e8-2ec1cea58ce9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33134","PortSpecifier":{"PortValue":33134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33134","PortSpecifier":{"PortValue":33134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609212,"nanos":880961119},"http":{"id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/sub-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc3eb32-285f-4fdb-8500-5419d0c20f0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36414","PortSpecifier":{"PortValue":36414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"619dfb22-8525-4d41-9890-b5b855acd9c6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36414","PortSpecifier":{"PortValue":36414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609212,"nanos":914677543},"http":{"id":"619dfb22-8525-4d41-9890-b5b855acd9c6","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aAkrgIVgFKHyID9K_si0uLm3OWQQSxy47x3iQAsZ2h9EwrQtzYMkZkSHacY2"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aAkrgIVgFKHyID9K_si0uLm3OWQQSxy47x3iQAsZ2h9EwrQtzYMkZkSHacY2\"}"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"911834e4-039f-41e0-9580-4ff1ebe435ce","keyName":"e2e-sub-iso-074e0b","subscription":"e2e-shared-sub-a2e760","tenant":"e2e-shared-a-0d877f","userId":"911834e4-039f-41e0-9580-4ff1ebe435ce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/sub-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a2e760"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"619dfb22-8525-4d41-9890-b5b855acd9c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33146","PortSpecifier":{"PortValue":33146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e847cfc-1f19-4253-82c5-7e657a854151","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33146","PortSpecifier":{"PortValue":33146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609212,"nanos":946112112},"http":{"id":"1e847cfc-1f19-4253-82c5-7e657a854151","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZB0vOPxzovRYnnDt_n5nnJv3WtM9NTTHHKMbr3nJb5ALXqOOXDZK1fsu2b7T"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZB0vOPxzovRYnnDt_n5nnJv3WtM9NTTHHKMbr3nJb5ALXqOOXDZK1fsu2b7T\"}"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a983662d-a37b-455e-b416-9e9a08497032","keyName":"e2e-sub-iso-26d2b1","subscription":"e2e-shared-sub-a2e760","tenant":"e2e-shared-b-d74e21","userId":"a983662d-a37b-455e-b416-9e9a08497032","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/sub-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a2e760"}
{"level":"info","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e847cfc-1f19-4253-82c5-7e657a854151","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abc4cfba7824020a78dd2af569037be216932578463e37d9e021f297b56204b3"}
{"level":"info","ts":"2026-07-09T15:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72ebaf5e07a19f034bb02988b52a070ef4a13740a1bbf1bdd1db9d8c5e630939"}
{"level":"info","ts":"2026-07-09T15:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c66da88101cf800b70611528c3f6bd8517beba738811e5e81ed2adbf5a2fba0"}
{"level":"info","ts":"2026-07-09T15:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4231e3553706ebedd34e24ccfad4ec99fafdfd2128bd7569f7b6a22d483b16"}
{"level":"info","ts":"2026-07-09T15:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48749aa59c3bddb9e146b82be30280187f218df32d295e048364962296f42df4"}
{"level":"info","ts":"2026-07-09T15:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d04310d68e4bc1398026615e4e557e0a3dad9409d30e9b9a694f150d457e9cfd"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70163603d9c81cc1b85abe0539d010ecb85028e6cefe594d547884c74865644d"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be4049abe8736cf63cc5dfc6bcf05b36ad69a6c417c098e92e2921210b1e9ee"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dc89725005f081dd8f89d05d47f19d890dbb8f65cebd25aca9ca5d86132c5a6"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ee621acece28c1ff7c83a7f8ef49c8804d1d8dcf46c2cb64242930c1d954c83"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e72a34a1f7d729a5599643b5594d8d8733c60daaa67d37c053a8a327f43b4986"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79e58529e2f545056c3c4afc520fad22b7d4dc629e938f0ca281291f645a29a9"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9f9dce3c562b5456accf1c42809c7a98145d0b7926bf7efd160148d05406426"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9a4aef61133382770a3d978aa21b7c6cb8014dda4ee55755607baf2375b5670"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50dd5aab64dba381d7567dc1f0f9c88b27d7a370a7e95b43537664bc73226098"}
{"level":"info","ts":"2026-07-09T15:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67b6c1cabc8be4efad79ccd435eaffcadd1315bd2c98259158d5a0b32ce67aa5"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21"}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374"}
{"level":"info","ts":"2026-07-09T15:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21"}
{"level":"debug","ts":"2026-07-09T15:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837"}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287"}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287"}
{"level":"error","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"}
{"level":"error","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287"}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287"}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287"}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"}
{"level":"info","ts":"2026-07-09T15:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287"}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94cb06f9357505c917cf287420967bf9d136b0690405d3cccf947ef4fa58ed25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94cb06f9357505c917cf287420967bf9d136b0690405d3cccf947ef4fa58ed25"}
{"level":"debug","ts":"2026-07-09T15:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6f46892be05920960366a750f3d311c41c1fb821b974ec05d8b10a565227327","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe"}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6f46892be05920960366a750f3d311c41c1fb821b974ec05d8b10a565227327"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7"}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374"}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:01:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9"}
{"level":"error","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b"}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"debug","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8"}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837"}
{"level":"info","ts":"2026-07-09T15:01:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"}
{"level":"info","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33340","PortSpecifier":{"PortValue":33340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33340","PortSpecifier":{"PortValue":33340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609278,"nanos":773012523},"http":{"id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b65ed6c1-ad77-4136-a2be-79e848e517fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53484","PortSpecifier":{"PortValue":53484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b6763a1-b8da-4524-8003-332dcf7d946c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53484","PortSpecifier":{"PortValue":53484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609278,"nanos":815837590},"http":{"id":"8b6763a1-b8da-4524-8003-332dcf7d946c","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/rate-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b6763a1-b8da-4524-8003-332dcf7d946c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33354","PortSpecifier":{"PortValue":33354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c0748dc-8263-4579-b75f-3e997a56cf27","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33354","PortSpecifier":{"PortValue":33354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609278,"nanos":860191859},"http":{"id":"6c0748dc-8263-4579-b75f-3e997a56cf27","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2qo7tJOTcwEuYIyg_9cziJhXMATWr1BBwOBtgIUy35vcWL9Xg1CcUSuJviyZ"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2qo7tJOTcwEuYIyg_9cziJhXMATWr1BBwOBtgIUy35vcWL9Xg1CcUSuJviyZ\"}"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12ce4411-4097-408b-ae28-e39d068d0d3f","keyName":"e2e-rate-a-27e0c5","subscription":"e2e-rate-iso-a-27e0c5","tenant":"e2e-shared-a-0d877f","userId":"12ce4411-4097-408b-ae28-e39d068d0d3f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-27e0c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27e0c5","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-27e0c5"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"12ce4411-4097-408b-ae28-e39d068d0d3f","keyName":"e2e-rate-a-27e0c5","selected_subscription":"e2e-rate-iso-a-27e0c5","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-27e0c5@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27e0c5","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c0748dc-8263-4579-b75f-3e997a56cf27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33358","PortSpecifier":{"PortValue":33358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96a923ed-bebd-48d1-814e-4d229cc659f1","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33358","PortSpecifier":{"PortValue":33358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609279,"nanos":923038131},"http":{"id":"96a923ed-bebd-48d1-814e-4d229cc659f1","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2qo7tJOTcwEuYIyg_9cziJhXMATWr1BBwOBtgIUy35vcWL9Xg1CcUSuJviyZ"}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2qo7tJOTcwEuYIyg_9cziJhXMATWr1BBwOBtgIUy35vcWL9Xg1CcUSuJviyZ\"}"}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12ce4411-4097-408b-ae28-e39d068d0d3f","keyName":"e2e-rate-a-27e0c5","subscription":"e2e-rate-iso-a-27e0c5","tenant":"e2e-shared-a-0d877f","userId":"12ce4411-4097-408b-ae28-e39d068d0d3f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-27e0c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27e0c5","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-27e0c5"}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"12ce4411-4097-408b-ae28-e39d068d0d3f","keyName":"e2e-rate-a-27e0c5","selected_subscription":"e2e-rate-iso-a-27e0c5","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-27e0c5@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27e0c5","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96a923ed-bebd-48d1-814e-4d229cc659f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a343f83e-9590-4a06-b818-6d8af222303b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33366","PortSpecifier":{"PortValue":33366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a343f83e-9590-4a06-b818-6d8af222303b","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a343f83e-9590-4a06-b818-6d8af222303b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33366","PortSpecifier":{"PortValue":33366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609280,"nanos":965811190},"http":{"id":"a343f83e-9590-4a06-b818-6d8af222303b","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2qo7tJOTcwEuYIyg_9cziJhXMATWr1BBwOBtgIUy35vcWL9Xg1CcUSuJviyZ"}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2qo7tJOTcwEuYIyg_9cziJhXMATWr1BBwOBtgIUy35vcWL9Xg1CcUSuJviyZ\"}"}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12ce4411-4097-408b-ae28-e39d068d0d3f","keyName":"e2e-rate-a-27e0c5","subscription":"e2e-rate-iso-a-27e0c5","tenant":"e2e-shared-a-0d877f","userId":"12ce4411-4097-408b-ae28-e39d068d0d3f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-27e0c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27e0c5","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a343f83e-9590-4a06-b818-6d8af222303b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-27e0c5"}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a343f83e-9590-4a06-b818-6d8af222303b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"12ce4411-4097-408b-ae28-e39d068d0d3f","keyName":"e2e-rate-a-27e0c5","selected_subscription":"e2e-rate-iso-a-27e0c5","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-27e0c5@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27e0c5","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a343f83e-9590-4a06-b818-6d8af222303b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a343f83e-9590-4a06-b818-6d8af222303b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bebe268-428f-4383-bf0c-292d8285e018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54930","PortSpecifier":{"PortValue":54930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bebe268-428f-4383-bf0c-292d8285e018","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bebe268-428f-4383-bf0c-292d8285e018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54930","PortSpecifier":{"PortValue":54930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609289,"nanos":731017172},"http":{"id":"0bebe268-428f-4383-bf0c-292d8285e018","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bebe268-428f-4383-bf0c-292d8285e018","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bebe268-428f-4383-bf0c-292d8285e018","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bebe268-428f-4383-bf0c-292d8285e018","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bebe268-428f-4383-bf0c-292d8285e018","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bebe268-428f-4383-bf0c-292d8285e018","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bebe268-428f-4383-bf0c-292d8285e018","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bebe268-428f-4383-bf0c-292d8285e018","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bebe268-428f-4383-bf0c-292d8285e018","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bebe268-428f-4383-bf0c-292d8285e018","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bebe268-428f-4383-bf0c-292d8285e018","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bebe268-428f-4383-bf0c-292d8285e018","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56078","PortSpecifier":{"PortValue":56078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c90077d1-dfd1-4a2f-86be-34b264897d27","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56078","PortSpecifier":{"PortValue":56078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609289,"nanos":771104554},"http":{"id":"c90077d1-dfd1-4a2f-86be-34b264897d27","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13687913-8580-437c-b6bc-441dcfc7fd35","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"]}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/498d5ebffd32"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864bb746-cbc5-4f27-b7a7-6726d44d533c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13687913-8580-437c-b6bc-441dcfc7fd35","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/rate-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c90077d1-dfd1-4a2f-86be-34b264897d27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609289,"nanos":812166525},"http":{"id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dc71640-cb31-4d21-8cfc-204d0b866dc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54954","PortSpecifier":{"PortValue":54954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54954","PortSpecifier":{"PortValue":54954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609290,"nanos":851903330},"http":{"id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf2a0a20-30ca-460d-8a6f-906ca03d799c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54970","PortSpecifier":{"PortValue":54970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54970","PortSpecifier":{"PortValue":54970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609291,"nanos":891904344},"http":{"id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f203c89-8e4f-4cf6-b374-1f49a24cc59b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54986","PortSpecifier":{"PortValue":54986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54986","PortSpecifier":{"PortValue":54986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609292,"nanos":929130268},"http":{"id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e6153b3-ecfb-4f56-8ff3-75f4a3137fe2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54994","PortSpecifier":{"PortValue":54994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3783ac80-fe8b-40dc-8da7-247e335561b9","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54994","PortSpecifier":{"PortValue":54994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609293,"nanos":969829719},"http":{"id":"3783ac80-fe8b-40dc-8da7-247e335561b9","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3783ac80-fe8b-40dc-8da7-247e335561b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53410","PortSpecifier":{"PortValue":53410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53410","PortSpecifier":{"PortValue":53410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609295,"nanos":10951971},"http":{"id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1dda53b-a9c9-44ef-a700-2252c4a50abe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53422","PortSpecifier":{"PortValue":53422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da0fe8e7-1520-4b83-a210-452117d41bf2","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53422","PortSpecifier":{"PortValue":53422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609296,"nanos":47988815},"http":{"id":"da0fe8e7-1520-4b83-a210-452117d41bf2","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da0fe8e7-1520-4b83-a210-452117d41bf2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53436","PortSpecifier":{"PortValue":53436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53436","PortSpecifier":{"PortValue":53436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609297,"nanos":85605082},"http":{"id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43aaf666-1fa6-4978-8206-8830dcbca4b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53450","PortSpecifier":{"PortValue":53450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53450","PortSpecifier":{"PortValue":53450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609298,"nanos":124348206},"http":{"id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cc3ca23-9708-4a34-abcb-a758afd6540f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53458","PortSpecifier":{"PortValue":53458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53458","PortSpecifier":{"PortValue":53458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609299,"nanos":160608265},"http":{"id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77f4b88a-8db0-4a8f-adb6-7b2b347ccd6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f337ee3-888b-448b-a12c-69fc37378689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53464","PortSpecifier":{"PortValue":53464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f337ee3-888b-448b-a12c-69fc37378689","method":"POST","path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions","host":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f337ee3-888b-448b-a12c-69fc37378689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53464","PortSpecifier":{"PortValue":53464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609300,"nanos":196653770},"http":{"id":"0f337ee3-888b-448b-a12c-69fc37378689","method":"POST","headers":{":authority":"e2e-shared-a-0d877f.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7j25YP51JxbCG5y_dkcpEIIW3L8QVucTbbKiHN6t2M9PrS8OfUCLEpyroVx\"}"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","subscription":"e2e-rate-iso-a-fa4cdd","tenant":"e2e-shared-a-0d877f","userId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\",\"requestedSubscription\":\"e2e-rate-iso-a-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0d877f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f337ee3-888b-448b-a12c-69fc37378689","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f337ee3-888b-448b-a12c-69fc37378689","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf218e0e-b023-4f6d-bac6-12e33e872c5c","keyName":"e2e-rate-a-fa4cdd","selected_subscription":"e2e-rate-iso-a-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-a-0d877f/e2e-rate-iso-a-fa4cdd@ai-tenant-e2e-shared-a-0d877f/rate-test-model-0d877f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0d877f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa4cdd","namespace":"ai-tenant-e2e-shared-a-0d877f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f337ee3-888b-448b-a12c-69fc37378689","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f337ee3-888b-448b-a12c-69fc37378689","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48454","PortSpecifier":{"PortValue":48454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","method":"POST","path":"/ai-tenant-e2e-shared-b-d74e21/rate-test-model-d74e21/v1/completions","host":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48454","PortSpecifier":{"PortValue":48454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783609300,"nanos":236744605},"http":{"id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","method":"POST","headers":{":authority":"e2e-shared-b-d74e21.apps.7bfc212a-a32c-41f1-9546-498d5ebffd32.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d74e21/rate-test-model-d74e21/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YcZt9gsO4JwTN1Aj_KbIEJztnL7vaqnt5bSk5pHKM3fI8OW79WAhXGyoBZa"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YcZt9gsO4JwTN1Aj_KbIEJztnL7vaqnt5bSk5pHKM3fI8OW79WAhXGyoBZa\"}"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5741cbf7-3f7e-4968-be84-32c8537ab3bc","keyName":"e2e-rate-b-fa4cdd","subscription":"e2e-rate-iso-b-fa4cdd","tenant":"e2e-shared-b-d74e21","userId":"5741cbf7-3f7e-4968-be84-32c8537ab3bc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d74e21/rate-test-model-d74e21\",\"requestedSubscription\":\"e2e-rate-iso-b-fa4cdd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d74e21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d74e21","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fa4cdd","namespace":"ai-tenant-e2e-shared-b-d74e21","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d74e21/rate-test-model-d74e21\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-fa4cdd"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5741cbf7-3f7e-4968-be84-32c8537ab3bc","keyName":"e2e-rate-b-fa4cdd","selected_subscription":"e2e-rate-iso-b-fa4cdd","selected_subscription_key":"ai-tenant-e2e-shared-b-d74e21/e2e-rate-iso-b-fa4cdd@ai-tenant-e2e-shared-b-d74e21/rate-test-model-d74e21","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d74e21","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fa4cdd","namespace":"ai-tenant-e2e-shared-b-d74e21","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:01:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5a67bc2-658d-4bdb-affd-de00ad4cb264","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89b8b158620363d7787a096b2aaad80e4e2515e2d072600b67243d87fc1ddf7b"}
{"level":"info","ts":"2026-07-09T15:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ab2dec9ff9ffdfebad990e8bfc14f54f1cefb6115b19bbafc57eb010093b877"}
{"level":"info","ts":"2026-07-09T15:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed6949d5063aea803d8960fe22aa918b125c1ff9f56dbb81bc44671c3a7a0373"}
{"level":"info","ts":"2026-07-09T15:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f12ea4bd8abd60734067c4c880f7528118ba1488e181b1c470c772e18ded3f9"}
{"level":"info","ts":"2026-07-09T15:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4511cdb38e9d440abc94958a74512fce37d61afe8708088d8ccc44d1ab896abe"}
{"level":"info","ts":"2026-07-09T15:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e838e5b498dea8d021cf9c8efb81af65617a5ab1dda8c85ce5c043942cbb068"}
{"level":"info","ts":"2026-07-09T15:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2d354ee4d5545791d0c57b3b9334a0aa3d59628488b6b8714bd934b344892e8"}
{"level":"info","ts":"2026-07-09T15:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1d10cf66d5a68d1997c8846eb716abeab20021fdba26d3ecaf69f023dd100f8"}
{"level":"info","ts":"2026-07-09T15:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b28b6270385ada1b9c1c374fd8768314faa2e3c3b67680dd43fc995b7388d21"}
{"level":"info","ts":"2026-07-09T15:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97953c07b1b30bfa8b25e03fd7241b4a190b48bd867fdf0838c7be52e809f837"}
{"level":"info","ts":"2026-07-09T15:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82f55224f7a6ab83e008ca7097440e9dcffb6b11a4b9e25440bfe544ad1a64f7"}
{"level":"info","ts":"2026-07-09T15:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a035feb8bcd3de39fbdcb30a0220b60306b37df7e930b282aea1d96f8efd7374"}
{"level":"info","ts":"2026-07-09T15:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f59c1972fde4dcbf127a4adea70aa36214364a38b42b96966d6a79ff67a05a1"}
{"level":"info","ts":"2026-07-09T15:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c56f4ecba0d7dbfac9848516507f899a56dd63d2a8c3bf6582b8d8735f151287"}
{"level":"info","ts":"2026-07-09T15:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6bb901368300e03918d1defbcf1831459ac474ac7b1d8eb22d200ffa2e57466"}
{"level":"info","ts":"2026-07-09T15:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fda74c5da2375ee23f9607201be7ec4c274402c0714bf6808ca2d4257ba949c8"}
{"level":"info","ts":"2026-07-09T15:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94cb06f9357505c917cf287420967bf9d136b0690405d3cccf947ef4fa58ed25"}
{"level":"info","ts":"2026-07-09T15:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bde2c31a1bd828cc7c8980b79b34281f13bc2762e0c1caac072690fdfc72a073"}
{"level":"info","ts":"2026-07-09T15:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6f46892be05920960366a750f3d311c41c1fb821b974ec05d8b10a565227327"}
{"level":"info","ts":"2026-07-09T15:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3c30dafee927cdef7bb60052e9b6714d9664905800ee0dbd3806d4190bb123a"}
{"level":"info","ts":"2026-07-09T15:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05a04e6df5c8ae35aec22ee4f1adaf00168aa70b6d35a848089ffdf8ee9ce3a7"}
{"level":"info","ts":"2026-07-09T15:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c159953242248310e98654787c6aa1d788bf6639b45bdf1b8ddb61ea202ed53f"}
{"level":"info","ts":"2026-07-09T15:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/627ec91befe174e25c1d3a1a17e5abe30c74aecfcefcf288832663df6f071606"}
{"level":"info","ts":"2026-07-09T15:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b130ceb3d2b2493de0737cbf4d94821a67f603725759b7590893daec5e5938f1"}