--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"error","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"error","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d7bbb67-b121-4803-994a-be717710587f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:35910","PortSpecifier":{"PortValue":35910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d7bbb67-b121-4803-994a-be717710587f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d7bbb67-b121-4803-994a-be717710587f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:35910","PortSpecifier":{"PortValue":35910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190689,"nanos":132589307},"http":{"id":"5d7bbb67-b121-4803-994a-be717710587f","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d7bbb67-b121-4803-994a-be717710587f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d7bbb67-b121-4803-994a-be717710587f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d7bbb67-b121-4803-994a-be717710587f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d7bbb67-b121-4803-994a-be717710587f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d7bbb67-b121-4803-994a-be717710587f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d7bbb67-b121-4803-994a-be717710587f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/auth-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d7bbb67-b121-4803-994a-be717710587f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d7bbb67-b121-4803-994a-be717710587f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d7bbb67-b121-4803-994a-be717710587f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d7bbb67-b121-4803-994a-be717710587f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d7bbb67-b121-4803-994a-be717710587f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49818","PortSpecifier":{"PortValue":49818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49818","PortSpecifier":{"PortValue":49818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190689,"nanos":171126043},"http":{"id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/auth-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4daee09-bfd6-465a-bb3a-6cb3cb925f2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06557442-1499-461c-8d75-76d35e74c9d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:35926","PortSpecifier":{"PortValue":35926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06557442-1499-461c-8d75-76d35e74c9d0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06557442-1499-461c-8d75-76d35e74c9d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:35926","PortSpecifier":{"PortValue":35926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190689,"nanos":211388352},"http":{"id":"06557442-1499-461c-8d75-76d35e74c9d0","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06557442-1499-461c-8d75-76d35e74c9d0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06557442-1499-461c-8d75-76d35e74c9d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06557442-1499-461c-8d75-76d35e74c9d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06557442-1499-461c-8d75-76d35e74c9d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06557442-1499-461c-8d75-76d35e74c9d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06557442-1499-461c-8d75-76d35e74c9d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/auth-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06557442-1499-461c-8d75-76d35e74c9d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06557442-1499-461c-8d75-76d35e74c9d0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06557442-1499-461c-8d75-76d35e74c9d0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06557442-1499-461c-8d75-76d35e74c9d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06557442-1499-461c-8d75-76d35e74c9d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49824","PortSpecifier":{"PortValue":49824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eac44bfc-1179-4a9c-a348-dcb449014c10","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49824","PortSpecifier":{"PortValue":49824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190689,"nanos":249813015},"http":{"id":"eac44bfc-1179-4a9c-a348-dcb449014c10","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/auth-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eac44bfc-1179-4a9c-a348-dcb449014c10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"info","ts":"2026-07-27T22:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"info","ts":"2026-07-27T22:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"debug","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"error","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"debug","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"debug","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:18:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:18:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60578","PortSpecifier":{"PortValue":60578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60578","PortSpecifier":{"PortValue":60578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190734,"nanos":530662840},"http":{"id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/auth-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a29a49a6-e029-4954-a1a7-7faa864e51b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44168","PortSpecifier":{"PortValue":44168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44168","PortSpecifier":{"PortValue":44168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190734,"nanos":572550316},"http":{"id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/auth-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35736bdb-d0be-4c6c-9bf7-8a3f676ac5c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44180","PortSpecifier":{"PortValue":44180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","method":"GET","path":"/maas-api/v1/api-keys/d2e05aa4-5898-4d52-9831-42e6ac069525","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44180","PortSpecifier":{"PortValue":44180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190734,"nanos":610324658},"http":{"id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","method":"GET","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d2e05aa4-5898-4d52-9831-42e6ac069525",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d2e05aa4-5898-4d52-9831-42e6ac069525",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/auth-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57ddb735-ede8-4957-8d47-2b99a9ceed70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60584","PortSpecifier":{"PortValue":60584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","method":"GET","path":"/maas-api/v1/api-keys/d2e05aa4-5898-4d52-9831-42e6ac069525","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60584","PortSpecifier":{"PortValue":60584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190734,"nanos":643971961},"http":{"id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","method":"GET","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d2e05aa4-5898-4d52-9831-42e6ac069525",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d2e05aa4-5898-4d52-9831-42e6ac069525",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/auth-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e2ce1ab-841e-43f3-b5f4-99b3e405ddf6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"info","ts":"2026-07-27T22:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"debug","ts":"2026-07-27T22:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"error","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"error","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:19:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"error","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:19:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57308","PortSpecifier":{"PortValue":57308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"186ec3a3-4fca-4f3f-973b-1783ef498733","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57308","PortSpecifier":{"PortValue":57308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190777,"nanos":679517160},"http":{"id":"186ec3a3-4fca-4f3f-973b-1783ef498733","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/auth-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"186ec3a3-4fca-4f3f-973b-1783ef498733","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:35226","PortSpecifier":{"PortValue":35226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:35226","PortSpecifier":{"PortValue":35226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190777,"nanos":722172851},"http":{"id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/auth-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d6a2d79-042e-4295-acfc-e31268f73b0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57324","PortSpecifier":{"PortValue":57324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57324","PortSpecifier":{"PortValue":57324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190777,"nanos":766595533},"http":{"id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19oGc36srrRhei8Vm_B8IqvYhdiPMwKZVKUpbMb1oHPhECJwCUTOUbjPlMqzI"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19oGc36srrRhei8Vm_B8IqvYhdiPMwKZVKUpbMb1oHPhECJwCUTOUbjPlMqzI\"}"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49a1170c-9607-4718-b4be-f934385680d2","keyName":"e2e-auth-iso-a-82bcc4","subscription":"e2e-auth-iso-0c722f","tenant":"e2e-shared-a-94450e","userId":"49a1170c-9607-4718-b4be-f934385680d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/auth-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0c722f"}
{"level":"info","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:19:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f9e971-069b-4f6c-95d7-a283a6dcb549","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:19:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7037fb0ed84717ac636d211daa7bbb7c13bdef5deb55a947cfbecc2782b11174"}
{"level":"info","ts":"2026-07-27T22:19:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d"}
{"level":"info","ts":"2026-07-27T22:19:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8784a873a3a6eb9114aeda088adac153b1800f4d655a2e40cd57b7c0537e369"}
{"level":"info","ts":"2026-07-27T22:19:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4460ad178eb3ddc228015ef31ad55a4730706b9c9d582ba25cc45adc02a414f3"}
{"level":"info","ts":"2026-07-27T22:19:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f375d3778dafad408ec7dddccb1c56e70ddc5cd320dcfe19d421f6b58fcdf6"}
{"level":"info","ts":"2026-07-27T22:19:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f21fdc7d5af971af308dbd0a5c5bcce56b2bfcee989c56e7de715e0a46814be1"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcfc152704a2b7194ade529bc2bcb6a08be89564ff0cba9ef4a4515c4097cee9"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/126b86d67c063f9adea8805b8534573f8117aac2ecdac6ae3abb88523fd903c0"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a22ab9ac5c74b1d16c0090beeadd393a12577d0f338c712e21e5120689e1e841"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c84368b2c9eec21b25fa2b5e91f323fa51fc276ecca3caa110740ed05752989"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5502c278771d623322df7234567012c227a80f7fe00ab7c3ba544d1c797fe6e"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdfc282829076bd59d6da6abc075c82971289c240bdabb47bc24ee8904533784"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5466ba9e49bb1a443cd5de6d335a61041d29e3da2149dfcc3933fa9142b2ac01"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/490bf57d1c47860c5507fc8ba70cdaf00ef41c7f993a07b333a2c25b028d17c4"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eba0d37f9fa7a0309e9c760eed8a9e86b5c6c488ada0c7fd12072b9e614cd6f6"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d468e39785cf7762113b27910dc53a90348af544f545c997264030812796e7ab"}
{"level":"info","ts":"2026-07-27T22:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be1ccfb3bb5cd87e60f409b6a2983373bbaf8935de8e3914e72222e577e646d7"}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"}
{"level":"error","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962"}
{"level":"error","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962"}
{"level":"error","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160153f5e20ad6e37d421b9441017ae809e0e784d9252d00b54efaa69fb6a5de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160153f5e20ad6e37d421b9441017ae809e0e784d9252d00b54efaa69fb6a5de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160153f5e20ad6e37d421b9441017ae809e0e784d9252d00b54efaa69fb6a5de"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"450a29950934f978283dd4304303efc3cb40f5343582c0409111db8ecfbe63ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/450a29950934f978283dd4304303efc3cb40f5343582c0409111db8ecfbe63ed"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"450a29950934f978283dd4304303efc3cb40f5343582c0409111db8ecfbe63ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160153f5e20ad6e37d421b9441017ae809e0e784d9252d00b54efaa69fb6a5de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["160153f5e20ad6e37d421b9441017ae809e0e784d9252d00b54efaa69fb6a5de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160153f5e20ad6e37d421b9441017ae809e0e784d9252d00b54efaa69fb6a5de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7157ddf46e96c7b0ec4c39eb970a74a57a3feb928c424f03692f07c25f5e0714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7157ddf46e96c7b0ec4c39eb970a74a57a3feb928c424f03692f07c25f5e0714","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7157ddf46e96c7b0ec4c39eb970a74a57a3feb928c424f03692f07c25f5e0714"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"450a29950934f978283dd4304303efc3cb40f5343582c0409111db8ecfbe63ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["450a29950934f978283dd4304303efc3cb40f5343582c0409111db8ecfbe63ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160153f5e20ad6e37d421b9441017ae809e0e784d9252d00b54efaa69fb6a5de"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"450a29950934f978283dd4304303efc3cb40f5343582c0409111db8ecfbe63ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"160153f5e20ad6e37d421b9441017ae809e0e784d9252d00b54efaa69fb6a5de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e52a30d5daa09fef912148e3bf3ba0f56f0339783131e129598165088bf6d6ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e52a30d5daa09fef912148e3bf3ba0f56f0339783131e129598165088bf6d6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7157ddf46e96c7b0ec4c39eb970a74a57a3feb928c424f03692f07c25f5e0714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7157ddf46e96c7b0ec4c39eb970a74a57a3feb928c424f03692f07c25f5e0714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7157ddf46e96c7b0ec4c39eb970a74a57a3feb928c424f03692f07c25f5e0714","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46f6220ec1b89c0c7d5a4e3cf336ad648e4ce77816bb2293d0f81a675253cbdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/450a29950934f978283dd4304303efc3cb40f5343582c0409111db8ecfbe63ed"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46f6220ec1b89c0c7d5a4e3cf336ad648e4ce77816bb2293d0f81a675253cbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e52a30d5daa09fef912148e3bf3ba0f56f0339783131e129598165088bf6d6ea"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7157ddf46e96c7b0ec4c39eb970a74a57a3feb928c424f03692f07c25f5e0714"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46f6220ec1b89c0c7d5a4e3cf336ad648e4ce77816bb2293d0f81a675253cbdf"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"450a29950934f978283dd4304303efc3cb40f5343582c0409111db8ecfbe63ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e52a30d5daa09fef912148e3bf3ba0f56f0339783131e129598165088bf6d6ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e52a30d5daa09fef912148e3bf3ba0f56f0339783131e129598165088bf6d6ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bddbb8452cb01190fdcdc97b6ba4759fea3353d31a94fc4b06eae2289c9066c"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e52a30d5daa09fef912148e3bf3ba0f56f0339783131e129598165088bf6d6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bddbb8452cb01190fdcdc97b6ba4759fea3353d31a94fc4b06eae2289c9066c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bddbb8452cb01190fdcdc97b6ba4759fea3353d31a94fc4b06eae2289c9066c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bddbb8452cb01190fdcdc97b6ba4759fea3353d31a94fc4b06eae2289c9066c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7157ddf46e96c7b0ec4c39eb970a74a57a3feb928c424f03692f07c25f5e0714","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9fa79dc0888e67db7f979bcf757cb3bc5decf3130d6ed7ed2fd03cfeb426831"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e52a30d5daa09fef912148e3bf3ba0f56f0339783131e129598165088bf6d6ea"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bddbb8452cb01190fdcdc97b6ba4759fea3353d31a94fc4b06eae2289c9066c"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46f6220ec1b89c0c7d5a4e3cf336ad648e4ce77816bb2293d0f81a675253cbdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46f6220ec1b89c0c7d5a4e3cf336ad648e4ce77816bb2293d0f81a675253cbdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46f6220ec1b89c0c7d5a4e3cf336ad648e4ce77816bb2293d0f81a675253cbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46f6220ec1b89c0c7d5a4e3cf336ad648e4ce77816bb2293d0f81a675253cbdf"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9fa79dc0888e67db7f979bcf757cb3bc5decf3130d6ed7ed2fd03cfeb426831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9fa79dc0888e67db7f979bcf757cb3bc5decf3130d6ed7ed2fd03cfeb426831"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9fa79dc0888e67db7f979bcf757cb3bc5decf3130d6ed7ed2fd03cfeb426831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9fa79dc0888e67db7f979bcf757cb3bc5decf3130d6ed7ed2fd03cfeb426831"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e52a30d5daa09fef912148e3bf3ba0f56f0339783131e129598165088bf6d6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bddbb8452cb01190fdcdc97b6ba4759fea3353d31a94fc4b06eae2289c9066c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46f6220ec1b89c0c7d5a4e3cf336ad648e4ce77816bb2293d0f81a675253cbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9fa79dc0888e67db7f979bcf757cb3bc5decf3130d6ed7ed2fd03cfeb426831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716"}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716"}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716"}
{"level":"info","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57924","PortSpecifier":{"PortValue":57924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96762d8a-72ef-4b8f-9df8-333b4419824b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57924","PortSpecifier":{"PortValue":57924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190865,"nanos":514243341},"http":{"id":"96762d8a-72ef-4b8f-9df8-333b4419824b","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/sub-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96762d8a-72ef-4b8f-9df8-333b4419824b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59630","PortSpecifier":{"PortValue":59630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59630","PortSpecifier":{"PortValue":59630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190865,"nanos":568936548},"http":{"id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/sub-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33e20414-91be-47e5-b4e0-3b9d9153d1fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57930","PortSpecifier":{"PortValue":57930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57930","PortSpecifier":{"PortValue":57930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190865,"nanos":619330899},"http":{"id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","method":"GET","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-d0huwKK5bghhcPtj_5CEktglxUUKkLx3AwujWdi16YVbWptS4WxWz7WBNRsu"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-d0huwKK5bghhcPtj_5CEktglxUUKkLx3AwujWdi16YVbWptS4WxWz7WBNRsu\"}"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9afb820d-2ba5-403e-831f-f76e8bb7f564","keyName":"e2e-sub-iso-3865c7","subscription":"e2e-a-only-5bcca3","tenant":"e2e-shared-a-94450e","userId":"9afb820d-2ba5-403e-831f-f76e8bb7f564","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/sub-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5bcca3"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81c0f40b-9f4e-4136-b0dc-f497f36bc64e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59646","PortSpecifier":{"PortValue":59646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59646","PortSpecifier":{"PortValue":59646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190865,"nanos":663178643},"http":{"id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","method":"GET","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UUesCWet6W8EDZ4G_NpQSnqvwFAjEM4MKnNXYT7jxNOUWIKTecMMNKMxv1Ao"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0cb892.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UUesCWet6W8EDZ4G_NpQSnqvwFAjEM4MKnNXYT7jxNOUWIKTecMMNKMxv1Ao\"}"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0cb892.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0da60d2-1102-4a81-bc26-e2bb5584c06c","keyName":"e2e-sub-iso-40a66f","subscription":"e2e-b-only-5bcca3","tenant":"e2e-shared-b-0cb892","userId":"a0da60d2-1102-4a81-bc26-e2bb5584c06c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/sub-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5bcca3"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc83ea4c-8452-4127-a141-6547c6e28cf5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60156","PortSpecifier":{"PortValue":60156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60156","PortSpecifier":{"PortValue":60156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190886,"nanos":372760384},"http":{"id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/sub-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549e5882-6189-48db-81a1-3cf0a8c5d30c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:34746","PortSpecifier":{"PortValue":34746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:34746","PortSpecifier":{"PortValue":34746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190886,"nanos":419202626},"http":{"id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/sub-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"798ecfe6-7ac9-4814-b46d-29bf641dd3f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60158","PortSpecifier":{"PortValue":60158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60158","PortSpecifier":{"PortValue":60158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190886,"nanos":463824725},"http":{"id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xjd0RY7249M3pHkL_c3LJvjppEnbWsASfAKlwd1H7qw1bPvoyS28hxD7Z2R6"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xjd0RY7249M3pHkL_c3LJvjppEnbWsASfAKlwd1H7qw1bPvoyS28hxD7Z2R6\"}"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7be9cbb-0780-4814-8179-652a74d68a2e","keyName":"e2e-sub-iso-44e5d5","subscription":"e2e-shared-sub-2a066b","tenant":"e2e-shared-a-94450e","userId":"a7be9cbb-0780-4814-8179-652a74d68a2e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/sub-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2a066b"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed04b1d2-0ca8-41ea-a6ec-1b2e15702993","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:34760","PortSpecifier":{"PortValue":34760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:34760","PortSpecifier":{"PortValue":34760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190886,"nanos":497676612},"http":{"id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VJwAMDWpp38q0v7Z_GWKxZ0ApmgnyNmWnxXXW3Lwf3tUcFJj7CgwktlKgmUI"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0cb892.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VJwAMDWpp38q0v7Z_GWKxZ0ApmgnyNmWnxXXW3Lwf3tUcFJj7CgwktlKgmUI\"}"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0cb892.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36408500-7298-45ef-a652-ec536d5924ef","keyName":"e2e-sub-iso-0e67f0","subscription":"e2e-shared-sub-2a066b","tenant":"e2e-shared-b-0cb892","userId":"36408500-7298-45ef-a652-ec536d5924ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/sub-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2a066b"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f4ebc44-112d-4a2d-ac29-6325aa3932f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce3ec68ab11978cf38874a03216255f462ffe551b375e6813d039bad5424c962"}
{"level":"info","ts":"2026-07-27T22:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e52a30d5daa09fef912148e3bf3ba0f56f0339783131e129598165088bf6d6ea"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/450a29950934f978283dd4304303efc3cb40f5343582c0409111db8ecfbe63ed"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ee750bbfc520f676d3939b096589e6083ecde65b0a9b10c64995b4708a8761c"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fd43695a3e8e4d874eb278c6e61a359fc1b8dd6056e24f5ce875127bdf88716"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bddbb8452cb01190fdcdc97b6ba4759fea3353d31a94fc4b06eae2289c9066c"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c60ca98aedf9bec990191f0c29fc300fcfc4a2b09da2149cbcec0233b393e5c"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9fa79dc0888e67db7f979bcf757cb3bc5decf3130d6ed7ed2fd03cfeb426831"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3ffd24b2f01bc073f3600e352cd2b82b196f0f4fea913f077ecd21fd8b8adc7"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/160153f5e20ad6e37d421b9441017ae809e0e784d9252d00b54efaa69fb6a5de"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7157ddf46e96c7b0ec4c39eb970a74a57a3feb928c424f03692f07c25f5e0714"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46f6220ec1b89c0c7d5a4e3cf336ad648e4ce77816bb2293d0f81a675253cbdf"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cedd0f20e1fbab7f97139801f0e748c67e83ca38ab6333774e2a1a992cebb44"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0adbed460d327d5822b3d3c356fc8151e10f18cf2d639b873a38d85807e6e716"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccf36a588c9212d614be9940a66d71820c61eb8f5454a9fad180ba681f3b453c"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d6e3bdc5618a95d5e8060ca24830b1fedfb169a569e55c7fa5864a50ce9d87e"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d"}
{"level":"info","ts":"2026-07-27T22:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"debug","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"debug","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"debug","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1"}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1"}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1"}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba"}
{"level":"error","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba"}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f"}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d"}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d"}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c130af5d250969c884a92841c36f0ea79787b3d11dc59da481778653837d307"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cca4778354154f17d2ade05ef67c58d9bb393b48c4db9031c831abca99f14f"}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c130af5d250969c884a92841c36f0ea79787b3d11dc59da481778653837d307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c130af5d250969c884a92841c36f0ea79787b3d11dc59da481778653837d307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8fd74c9e4b72697a7f86d047a9ba603abc49dd0ca7edd800bfccf7b00df8590"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c130af5d250969c884a92841c36f0ea79787b3d11dc59da481778653837d307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c130af5d250969c884a92841c36f0ea79787b3d11dc59da481778653837d307"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cca4778354154f17d2ade05ef67c58d9bb393b48c4db9031c831abca99f14f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8cca4778354154f17d2ade05ef67c58d9bb393b48c4db9031c831abca99f14f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39f261c5daa6d74b152543a164039f9e7744c2dfbda1a367ee6a0812aac611d"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/374c297326d157dc47ddf4667ee8f66da5636ec9bcd7d17ce3135ba723f208f8"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cca4778354154f17d2ade05ef67c58d9bb393b48c4db9031c831abca99f14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8fd74c9e4b72697a7f86d047a9ba603abc49dd0ca7edd800bfccf7b00df8590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8fd74c9e4b72697a7f86d047a9ba603abc49dd0ca7edd800bfccf7b00df8590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3419120fc78f6fb4bd3d74c75728f3b41eb97ab83ed2576c6467ab513613b92"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8fd74c9e4b72697a7f86d047a9ba603abc49dd0ca7edd800bfccf7b00df8590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cca4778354154f17d2ade05ef67c58d9bb393b48c4db9031c831abca99f14f"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/651e4ad14ed776c4bbfb7ad0031c1a5488431b953e505e854df50705087d8d1a"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c130af5d250969c884a92841c36f0ea79787b3d11dc59da481778653837d307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39f261c5daa6d74b152543a164039f9e7744c2dfbda1a367ee6a0812aac611d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39f261c5daa6d74b152543a164039f9e7744c2dfbda1a367ee6a0812aac611d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39f261c5daa6d74b152543a164039f9e7744c2dfbda1a367ee6a0812aac611d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"374c297326d157dc47ddf4667ee8f66da5636ec9bcd7d17ce3135ba723f208f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["374c297326d157dc47ddf4667ee8f66da5636ec9bcd7d17ce3135ba723f208f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8fd74c9e4b72697a7f86d047a9ba603abc49dd0ca7edd800bfccf7b00df8590"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"374c297326d157dc47ddf4667ee8f66da5636ec9bcd7d17ce3135ba723f208f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39f261c5daa6d74b152543a164039f9e7744c2dfbda1a367ee6a0812aac611d"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/374c297326d157dc47ddf4667ee8f66da5636ec9bcd7d17ce3135ba723f208f8"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3419120fc78f6fb4bd3d74c75728f3b41eb97ab83ed2576c6467ab513613b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3419120fc78f6fb4bd3d74c75728f3b41eb97ab83ed2576c6467ab513613b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3419120fc78f6fb4bd3d74c75728f3b41eb97ab83ed2576c6467ab513613b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cca4778354154f17d2ade05ef67c58d9bb393b48c4db9031c831abca99f14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"651e4ad14ed776c4bbfb7ad0031c1a5488431b953e505e854df50705087d8d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["651e4ad14ed776c4bbfb7ad0031c1a5488431b953e505e854df50705087d8d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3419120fc78f6fb4bd3d74c75728f3b41eb97ab83ed2576c6467ab513613b92"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"651e4ad14ed776c4bbfb7ad0031c1a5488431b953e505e854df50705087d8d1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/651e4ad14ed776c4bbfb7ad0031c1a5488431b953e505e854df50705087d8d1a"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8fd74c9e4b72697a7f86d047a9ba603abc49dd0ca7edd800bfccf7b00df8590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39f261c5daa6d74b152543a164039f9e7744c2dfbda1a367ee6a0812aac611d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"374c297326d157dc47ddf4667ee8f66da5636ec9bcd7d17ce3135ba723f208f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3419120fc78f6fb4bd3d74c75728f3b41eb97ab83ed2576c6467ab513613b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"651e4ad14ed776c4bbfb7ad0031c1a5488431b953e505e854df50705087d8d1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:22:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"error","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:22:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55682","PortSpecifier":{"PortValue":55682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55682","PortSpecifier":{"PortValue":55682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190971,"nanos":280595056},"http":{"id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"499e4b1c-f2ec-4575-97ca-55f41928d8ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52026","PortSpecifier":{"PortValue":52026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52026","PortSpecifier":{"PortValue":52026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190971,"nanos":324301746},"http":{"id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/rate-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26016f22-cdc6-4ccd-9813-5a3cae0f817b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a491f087-7229-4e3f-bd9b-370e30050632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55684","PortSpecifier":{"PortValue":55684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a491f087-7229-4e3f-bd9b-370e30050632","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a491f087-7229-4e3f-bd9b-370e30050632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55684","PortSpecifier":{"PortValue":55684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190971,"nanos":366011833},"http":{"id":"a491f087-7229-4e3f-bd9b-370e30050632","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UMaq3mNZISb2mCG7_NiBazAJHYgFXjgPb4uusOfIoRcMmorLWabwBnwS9pQq"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UMaq3mNZISb2mCG7_NiBazAJHYgFXjgPb4uusOfIoRcMmorLWabwBnwS9pQq\"}"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d536acdf-3b42-4c38-9e31-c3b85fc93a51","keyName":"e2e-rate-a-30cd63","subscription":"e2e-rate-iso-a-30cd63","tenant":"e2e-shared-a-94450e","userId":"d536acdf-3b42-4c38-9e31-c3b85fc93a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-30cd63\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-30cd63","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a491f087-7229-4e3f-bd9b-370e30050632","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-30cd63"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a491f087-7229-4e3f-bd9b-370e30050632","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d536acdf-3b42-4c38-9e31-c3b85fc93a51","keyName":"e2e-rate-a-30cd63","selected_subscription":"e2e-rate-iso-a-30cd63","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-30cd63@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-30cd63","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a491f087-7229-4e3f-bd9b-370e30050632","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a491f087-7229-4e3f-bd9b-370e30050632","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55700","PortSpecifier":{"PortValue":55700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55700","PortSpecifier":{"PortValue":55700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190972,"nanos":461026363},"http":{"id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UMaq3mNZISb2mCG7_NiBazAJHYgFXjgPb4uusOfIoRcMmorLWabwBnwS9pQq"}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UMaq3mNZISb2mCG7_NiBazAJHYgFXjgPb4uusOfIoRcMmorLWabwBnwS9pQq\"}"}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d536acdf-3b42-4c38-9e31-c3b85fc93a51","keyName":"e2e-rate-a-30cd63","subscription":"e2e-rate-iso-a-30cd63","tenant":"e2e-shared-a-94450e","userId":"d536acdf-3b42-4c38-9e31-c3b85fc93a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-30cd63\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-30cd63","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-30cd63"}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d536acdf-3b42-4c38-9e31-c3b85fc93a51","keyName":"e2e-rate-a-30cd63","selected_subscription":"e2e-rate-iso-a-30cd63","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-30cd63@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-30cd63","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be9fcfd3-cd1c-469a-99a8-86b4dc671c79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55710","PortSpecifier":{"PortValue":55710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31740806-baf0-4f2a-91e9-6f74b364352a","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55710","PortSpecifier":{"PortValue":55710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190973,"nanos":510449721},"http":{"id":"31740806-baf0-4f2a-91e9-6f74b364352a","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UMaq3mNZISb2mCG7_NiBazAJHYgFXjgPb4uusOfIoRcMmorLWabwBnwS9pQq"}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UMaq3mNZISb2mCG7_NiBazAJHYgFXjgPb4uusOfIoRcMmorLWabwBnwS9pQq\"}"}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d536acdf-3b42-4c38-9e31-c3b85fc93a51","keyName":"e2e-rate-a-30cd63","subscription":"e2e-rate-iso-a-30cd63","tenant":"e2e-shared-a-94450e","userId":"d536acdf-3b42-4c38-9e31-c3b85fc93a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-30cd63\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-30cd63","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-30cd63"}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d536acdf-3b42-4c38-9e31-c3b85fc93a51","keyName":"e2e-rate-a-30cd63","selected_subscription":"e2e-rate-iso-a-30cd63","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-30cd63@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-30cd63","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:22:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31740806-baf0-4f2a-91e9-6f74b364352a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42348","PortSpecifier":{"PortValue":42348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42348","PortSpecifier":{"PortValue":42348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190997,"nanos":978131557},"http":{"id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d713b3d9-02de-4d09-bbf1-fcf99e275971","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36478","PortSpecifier":{"PortValue":36478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36478","PortSpecifier":{"PortValue":36478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190998,"nanos":16873478},"http":{"id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/rate-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d2405d-8ed3-4a15-8fc8-cc2995633553","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42350","PortSpecifier":{"PortValue":42350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42350","PortSpecifier":{"PortValue":42350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190998,"nanos":53415049},"http":{"id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2\"}"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","subscription":"e2e-rate-iso-a-00b355","tenant":"e2e-shared-a-94450e","userId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-00b355\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00b355"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","selected_subscription":"e2e-rate-iso-a-00b355","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-00b355@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7edebf7a-6cc6-415f-9629-74ce5b99768d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84e624b2-9690-4282-a88a-48969b92d805","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42360","PortSpecifier":{"PortValue":42360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84e624b2-9690-4282-a88a-48969b92d805","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84e624b2-9690-4282-a88a-48969b92d805","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42360","PortSpecifier":{"PortValue":42360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785190999,"nanos":97442709},"http":{"id":"84e624b2-9690-4282-a88a-48969b92d805","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2"}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2\"}"}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","subscription":"e2e-rate-iso-a-00b355","tenant":"e2e-shared-a-94450e","userId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-00b355\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84e624b2-9690-4282-a88a-48969b92d805","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00b355"}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e624b2-9690-4282-a88a-48969b92d805","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","selected_subscription":"e2e-rate-iso-a-00b355","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-00b355@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84e624b2-9690-4282-a88a-48969b92d805","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84e624b2-9690-4282-a88a-48969b92d805","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b8edbc3-57d3-465d-a465-c422749da254","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42374","PortSpecifier":{"PortValue":42374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b8edbc3-57d3-465d-a465-c422749da254","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b8edbc3-57d3-465d-a465-c422749da254","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42374","PortSpecifier":{"PortValue":42374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191000,"nanos":135467842},"http":{"id":"4b8edbc3-57d3-465d-a465-c422749da254","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2"}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2\"}"}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","subscription":"e2e-rate-iso-a-00b355","tenant":"e2e-shared-a-94450e","userId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-00b355\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b8edbc3-57d3-465d-a465-c422749da254","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00b355"}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b8edbc3-57d3-465d-a465-c422749da254","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","selected_subscription":"e2e-rate-iso-a-00b355","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-00b355@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b8edbc3-57d3-465d-a465-c422749da254","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b8edbc3-57d3-465d-a465-c422749da254","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42388","PortSpecifier":{"PortValue":42388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42388","PortSpecifier":{"PortValue":42388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191001,"nanos":188167971},"http":{"id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2"}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2\"}"}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","subscription":"e2e-rate-iso-a-00b355","tenant":"e2e-shared-a-94450e","userId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-00b355\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00b355"}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","selected_subscription":"e2e-rate-iso-a-00b355","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-00b355@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"050e31fc-9f1e-4f3a-aa8b-9fe3748667d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42398","PortSpecifier":{"PortValue":42398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8141037-8b95-4667-af0f-0c2d3da3564e","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42398","PortSpecifier":{"PortValue":42398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191002,"nanos":229331979},"http":{"id":"a8141037-8b95-4667-af0f-0c2d3da3564e","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2"}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2\"}"}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","subscription":"e2e-rate-iso-a-00b355","tenant":"e2e-shared-a-94450e","userId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-00b355\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00b355"}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","selected_subscription":"e2e-rate-iso-a-00b355","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-00b355@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8141037-8b95-4667-af0f-0c2d3da3564e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42404","PortSpecifier":{"PortValue":42404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42404","PortSpecifier":{"PortValue":42404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191003,"nanos":269871721},"http":{"id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2"}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2\"}"}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","subscription":"e2e-rate-iso-a-00b355","tenant":"e2e-shared-a-94450e","userId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-00b355\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00b355"}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","selected_subscription":"e2e-rate-iso-a-00b355","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-00b355@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e507ff45-8f35-4afb-aa9d-fe3c3dfe61c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"227feea9-5363-486a-80f4-d75f41bbde84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42416","PortSpecifier":{"PortValue":42416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"227feea9-5363-486a-80f4-d75f41bbde84","method":"POST","path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions","host":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"227feea9-5363-486a-80f4-d75f41bbde84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42416","PortSpecifier":{"PortValue":42416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191004,"nanos":310178889},"http":{"id":"227feea9-5363-486a-80f4-d75f41bbde84","method":"POST","headers":{":authority":"e2e-shared-a-94450e.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RHtzyGWQpalqC4jy_4TcInh8mGBAi9bVJkx7eLMGIuuaOMAXRV5nqKZ3cKs2\"}"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","subscription":"e2e-rate-iso-a-00b355","tenant":"e2e-shared-a-94450e","userId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\",\"requestedSubscription\":\"e2e-rate-iso-a-00b355\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94450e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"227feea9-5363-486a-80f4-d75f41bbde84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00b355"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"227feea9-5363-486a-80f4-d75f41bbde84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66db9f1e-dc3f-4137-b9ef-c178fab4d3d6","keyName":"e2e-rate-a-00b355","selected_subscription":"e2e-rate-iso-a-00b355","selected_subscription_key":"ai-tenant-e2e-shared-a-94450e/e2e-rate-iso-a-00b355@ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-94450e/models/facebook/opt-125m","name":"rate-test-model-94450e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00b355","namespace":"ai-tenant-e2e-shared-a-94450e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-94450e/rate-test-model-94450e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"227feea9-5363-486a-80f4-d75f41bbde84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"227feea9-5363-486a-80f4-d75f41bbde84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36482","PortSpecifier":{"PortValue":36482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b970122-6f9e-4911-b15d-31ebd025e760","method":"POST","path":"/ai-tenant-e2e-shared-b-0cb892/rate-test-model-0cb892/v1/completions","host":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36482","PortSpecifier":{"PortValue":36482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191004,"nanos":349656120},"http":{"id":"2b970122-6f9e-4911-b15d-31ebd025e760","method":"POST","headers":{":authority":"e2e-shared-b-0cb892.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-0cb892/rate-test-model-0cb892/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SsCOLBP7fDt2wloI_3oxoYiLfVy80Fg8NCQ6Wp824sMAtxGwdS5SFiRjw94A"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0cb892.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SsCOLBP7fDt2wloI_3oxoYiLfVy80Fg8NCQ6Wp824sMAtxGwdS5SFiRjw94A\"}"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0cb892.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01dc50dc-37a7-4857-a1b8-fbf2c49b26fc","keyName":"e2e-rate-b-00b355","subscription":"e2e-rate-iso-b-00b355","tenant":"e2e-shared-b-0cb892","userId":"01dc50dc-37a7-4857-a1b8-fbf2c49b26fc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-0cb892.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-0cb892/rate-test-model-0cb892\",\"requestedSubscription\":\"e2e-rate-iso-b-00b355\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0cb892.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m","name":"rate-test-model-0cb892","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-00b355","namespace":"ai-tenant-e2e-shared-b-0cb892","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-0cb892/rate-test-model-0cb892"}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0cb892/rate-test-model-0cb892\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-00b355"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01dc50dc-37a7-4857-a1b8-fbf2c49b26fc","keyName":"e2e-rate-b-00b355","selected_subscription":"e2e-rate-iso-b-00b355","selected_subscription_key":"ai-tenant-e2e-shared-b-0cb892/e2e-rate-iso-b-00b355@ai-tenant-e2e-shared-b-0cb892/rate-test-model-0cb892","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-0cb892/models/facebook/opt-125m","name":"rate-test-model-0cb892","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-00b355","namespace":"ai-tenant-e2e-shared-b-0cb892","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-0cb892/rate-test-model-0cb892"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b970122-6f9e-4911-b15d-31ebd025e760","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:23:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/374c297326d157dc47ddf4667ee8f66da5636ec9bcd7d17ce3135ba723f208f8"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9eb374bf769f00fe00e314781555cf74f559bbdc83cde527fcffc08b9f8f11d"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93d9189eaacf9c57cc5ec62aca2952eac2267937cbacdff8134d0abe36e85cfc"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8cca4778354154f17d2ade05ef67c58d9bb393b48c4db9031c831abca99f14f"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4208c23bde7ccfbe37a24df07662a3fb9b61ec551e17a6eab83216e618bd6ac3"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb826e3a409b7e214f13d8d38cf953137305169cb1a0e7ce46fb6538d582a668"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c130af5d250969c884a92841c36f0ea79787b3d11dc59da481778653837d307"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f97a868dc8a6f08239624208063c3a44c2b062a2fd3dca2bd24d830901695ce"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58c06faf806c4fc36f8f2484e4e015d2520ae3eebde4534c2b62d54f57f64c5d"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbf6fb570d0f9660b964e9aa7d7d82826ce5483721b4816f8e335ee771719104"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a39f261c5daa6d74b152543a164039f9e7744c2dfbda1a367ee6a0812aac611d"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8a83ee13461d3b75c36bfdeb47ebcac7a8e56b5e1931a109de0e60ce8ec334a"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10c7b0207d3ed8c785d16b9701a02e30b0326ecbfe86ae3808b194e8521aa3ba"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/651e4ad14ed776c4bbfb7ad0031c1a5488431b953e505e854df50705087d8d1a"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cab5cd538284f20ba2824e2cba4b98a22e1da9aa7a6b01a9b557471591d62102"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d1ee14c1ce8a31ad1490db7cc861c57e13d65c8277aacd6e7e83185a0f1d5d1"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3419120fc78f6fb4bd3d74c75728f3b41eb97ab83ed2576c6467ab513613b92"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df9d1385794299031c76433470b1d1c2c4fb379aaa2b7474d09e61fbdebd0500"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d447cefdc200cae8422225fdc7ed9c391b0aea8ae9b45e5856fe46212763697d"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8fd74c9e4b72697a7f86d047a9ba603abc49dd0ca7edd800bfccf7b00df8590"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/245797f48ea5db295f842620163916d9b0d94c32e7f96832d07c447ef9bdd59c"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e86fb70bdf2694c39733784a7b225dd0dd88688e42319f0e51ebf75e29a3bed"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5767b5fb8cd955fb67afd733b1b93957b715c990bf4e9bc2c8e3761d082ae080"}
{"level":"info","ts":"2026-07-27T22:23:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddc8a1e8208c13ca867e4dda88779fa55245e14a0e6f28ad3ad83a784394f61f"}
{"level":"info","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54200","PortSpecifier":{"PortValue":54200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9183780b-9e8d-44df-a7c8-0605e82c3059","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54200","PortSpecifier":{"PortValue":54200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191068,"nanos":203761690},"http":{"id":"9183780b-9e8d-44df-a7c8-0605e82c3059","method":"POST","headers":{":authority":"maas.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9183780b-9e8d-44df-a7c8-0605e82c3059","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54210","PortSpecifier":{"PortValue":54210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54210","PortSpecifier":{"PortValue":54210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191068,"nanos":257514208},"http":{"id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","method":"POST","headers":{":authority":"maas.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T6HNYSAsbLST5MaB_pt0qrniVdO4TOtkalY7YDsGRB5GInwyiZXNLd1l8Ge2"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T6HNYSAsbLST5MaB_pt0qrniVdO4TOtkalY7YDsGRB5GInwyiZXNLd1l8Ge2\"}"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcb3c714-ec7a-4848-99f1-e16b96db553b","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"dcb3c714-ec7a-4848-99f1-e16b96db553b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dcb3c714-ec7a-4848-99f1-e16b96db553b","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1b28eab-19e5-4a05-9080-ebb6606bb925","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e"}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e"}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e"}
{"level":"error","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31f203314bf82ed2d6b3b00f2821a194eeddca0ea933612436f7fe7ddc6e63e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31f203314bf82ed2d6b3b00f2821a194eeddca0ea933612436f7fe7ddc6e63e1"}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31f203314bf82ed2d6b3b00f2821a194eeddca0ea933612436f7fe7ddc6e63e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31f203314bf82ed2d6b3b00f2821a194eeddca0ea933612436f7fe7ddc6e63e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31f203314bf82ed2d6b3b00f2821a194eeddca0ea933612436f7fe7ddc6e63e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31f203314bf82ed2d6b3b00f2821a194eeddca0ea933612436f7fe7ddc6e63e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31f203314bf82ed2d6b3b00f2821a194eeddca0ea933612436f7fe7ddc6e63e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e"}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31f203314bf82ed2d6b3b00f2821a194eeddca0ea933612436f7fe7ddc6e63e1"}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"}
{"level":"info","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba"}
{"level":"info","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9492bdf3867eb527d93300109f916aad0500f30e14f8eac7c1e41d581f32fa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9492bdf3867eb527d93300109f916aad0500f30e14f8eac7c1e41d581f32fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9492bdf3867eb527d93300109f916aad0500f30e14f8eac7c1e41d581f32fa8"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9492bdf3867eb527d93300109f916aad0500f30e14f8eac7c1e41d581f32fa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9492bdf3867eb527d93300109f916aad0500f30e14f8eac7c1e41d581f32fa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9492bdf3867eb527d93300109f916aad0500f30e14f8eac7c1e41d581f32fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9492bdf3867eb527d93300109f916aad0500f30e14f8eac7c1e41d581f32fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T22:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"}
{"level":"error","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9492bdf3867eb527d93300109f916aad0500f30e14f8eac7c1e41d581f32fa8"}
{"level":"info","ts":"2026-07-27T22:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b"}
{"level":"info","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49972","PortSpecifier":{"PortValue":49972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-dd2178.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49972","PortSpecifier":{"PortValue":49972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191149,"nanos":260496251},"http":{"id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","method":"POST","headers":{":authority":"e2e-ipp-a-dd2178.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"]}}
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/21a4f42cd0d8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f625edef-4fc5-46e7-bff7-ca2c73a4add0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3d26c289-6abd-42ad-9eb2-61599c4756c3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-dd2178.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-dd2178/ipp-route-dd2178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-dd2178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a8548c6-ee58-4fcb-b283-a0441859d7be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49976","PortSpecifier":{"PortValue":49976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","method":"POST","path":"/ai-tenant-e2e-ipp-a-dd2178/ipp-route-dd2178/v1/chat/completions","host":"e2e-ipp-a-dd2178.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49976","PortSpecifier":{"PortValue":49976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785191151,"nanos":328047472},"http":{"id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","method":"POST","headers":{":authority":"e2e-ipp-a-dd2178.apps.81b1b2f7-9d95-4a5e-8fe9-21a4f42cd0d8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-dd2178/ipp-route-dd2178/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eUuqDlSqzLTvIo0s_sngiZri0imZOZDo7UrfHyX8IIX2WjQyJ5ZPKaRamI8J"}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-dd2178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eUuqDlSqzLTvIo0s_sngiZri0imZOZDo7UrfHyX8IIX2WjQyJ5ZPKaRamI8J\"}"}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-dd2178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2115ccb-0420-4660-afe0-c57d01731f95","keyName":"e2e-ipp-dd2178","subscription":"ipp-route-dd2178-sub","tenant":"e2e-ipp-a-dd2178","userId":"b2115ccb-0420-4660-afe0-c57d01731f95","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-dd2178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-dd2178/ipp-route-dd2178\",\"requestedSubscription\":\"ipp-route-dd2178-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-dd2178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-dd2178/models/facebook/opt-125m","name":"ipp-route-dd2178","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-dd2178-sub","namespace":"ai-tenant-e2e-ipp-a-dd2178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-dd2178/ipp-route-dd2178"}}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-dd2178/ipp-route-dd2178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-dd2178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-dd2178-sub"}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2115ccb-0420-4660-afe0-c57d01731f95","keyName":"e2e-ipp-dd2178","selected_subscription":"ipp-route-dd2178-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-dd2178/ipp-route-dd2178-sub@ai-tenant-e2e-ipp-a-dd2178/ipp-route-dd2178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-dd2178/models/facebook/opt-125m","name":"ipp-route-dd2178","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-dd2178-sub","namespace":"ai-tenant-e2e-ipp-a-dd2178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-dd2178/ipp-route-dd2178"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T22:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf13fb92-3dcc-4c7a-a2e0-07566eeb575c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T22:26:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9308c6ff7809ac01ef573cf25ad6e752ad1c672679299a56a07ee0c6607500ba"}
{"level":"info","ts":"2026-07-27T22:26:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90b2b6c10aaa46f706f1be5f3ec4f9d5c14d80def2a75ea11439810329bee733"}
{"level":"info","ts":"2026-07-27T22:26:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5d6a789a58e56a7a0728803cd1ce0cb5a8f45e1175712664a2aaa860b494588"}
{"level":"info","ts":"2026-07-27T22:26:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14f65ef5b0e67bae8a8fb37193849f1639cfeb3661ec31109fad221d9d3f10d4"}
{"level":"info","ts":"2026-07-27T22:26:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4d3ff319f68501e52e6f1e7c889ea4d5ba1d654ff30adc660a3afb30584fc86"}
{"level":"info","ts":"2026-07-27T22:26:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31f203314bf82ed2d6b3b00f2821a194eeddca0ea933612436f7fe7ddc6e63e1"}
{"level":"info","ts":"2026-07-27T22:26:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d696829856ae2257288eea4368c486c9c5e2cae362296f49738d7127013e7a3b"}
{"level":"info","ts":"2026-07-27T22:26:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fa5833d56c95f7caaef39ed7ac0a08e153eb4e7782f01db729e9ea3afb38d3e"}
{"level":"info","ts":"2026-07-27T22:26:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a01165718877d9067078931e9b6ac117eda65ac0afb8a826f6e3ba21ea279cc4"}
{"level":"info","ts":"2026-07-27T22:26:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/980c4dbbcd574761815f80a80d09bb75a43d93768fb2156466a10a792e51a8b6"}
{"level":"info","ts":"2026-07-27T22:26:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/331fc0c57b21429ffc6bfaf6c7486a184942df4229ba2c9e58dd57f229899d45"}
{"level":"info","ts":"2026-07-27T22:26:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9492bdf3867eb527d93300109f916aad0500f30e14f8eac7c1e41d581f32fa8"}